Identity Connect - IWA Debug Logs and debugging Cryptosystem Issues
|Knowledge Article Number||000206097|
|Description||This article explains
1) Setting up debug logs to get additional debug information to troubleshoot IWA issues.
2) Debugging Cryptosystem Issues
|Resolution||1) Setting up debug logs to get additional debug information to troubleshoot IWA issues.
2) If the below errors are observed in the debug logs, it indicates there is higher cryptosystem in the environment.
Use : /crypto ALL/
for the crypto parameter of the KTPass command.
Caused by: KrbException: KDC has no support for encryption type (14)
SEVERE: IWA WDSSO: Authentication failed with GSSException.
Failure unspecified at GSS-API level (Mechanism level: Encryption type AES256 CTS mode with HMAC SHA1-96 is not supported/enabled)