The user is experiencing issues with Kerberos SSO on Tableau Server 2025.1.5. They have created the SPN against a load balancer URL and generated the keytab file, but there appears to be a mismatch or something wrong with the keytab, resulting in a 'Checksum failed' error in the vizportal logs:
com.tableausoftware.domain.user.auth.LoginAppService - Failure during GSSAPI security context exchange
org.ietf.jgss.GSSException: Failure unspecified at GSS-API level (Mechanism level: Checksum failed)
1. Verify that the keytab/SPN fields match and the keytab file is encrypted with aes256.
2. Check the ktpass command and ensure it is valid
3. Verify that the gateway.public.host matches the load balance URL.
4. Run the ktpass command as a domain admin.
5. Upload the new Tableau Server logs to Egnyte if the issue persists and contact Tableau Support
005299597

We use three kinds of cookies on our websites: required, functional, and advertising. You can choose whether functional and advertising cookies apply. Click on the different cookie categories to find out more about each category and to change the default settings.
Privacy Statement
Required cookies are necessary for basic website functionality. Some examples include: session cookies needed to transmit the website, authentication cookies, and security cookies.
Functional cookies enhance functions, performance, and services on the website. Some examples include: cookies used to analyze site traffic, cookies used for market research, and cookies used to display advertising that is not directed to a particular individual.
Advertising cookies track activity across websites in order to understand a viewer’s interests, and direct them specific marketing. Some examples include: cookies used for remarketing, or interest-based advertising.