Issue
After upgrading Tableau Server to a version released October 2022 or later, "Tableau Server could not authenticate you automatically" error occurs and users are unable to login automatically with Kerberos SSO.
Last Modified Date: 05 Sep 2023
Environment
- Tableau Server versions released October 2022 or later
Resolution
Add support for the stronger AES128 and AES256 encryption types and remove both RC4 and 3DES encryption as they are no longer considered secure. See Understanding Keytab Requirements for more information.
NOTE: If your environment is using a Run as Service account for Tableau Server, one or both of the following options must be enabled on the user account in Active Directory, or the encryption type will default back to RC4:
- This account supports Kerberos AES 128 bit encryption.
- This account support Kerberos AES 256 bit encryption.
Cause
Java was upgraded in Tableau Server versions released October 2022 or later. As a result, Tableau Server no longer supports RC4 or 3DES encryption types in keytabs. As such, you will see this error after upgrading to a newer version of Tableau Server while using an unsupported encryption type for Kerberos.Additional Information
Identifying a match for this issue:1. Confirm Tableau Server version matches list of impacted versions in Environment section above
2. Review Tableau Server "vizportal" logs (see Tableau Server Logs and Log File Locations) to identify the following message: "Failure unspecified at GSS-API level (Mechanism level: Encryption type RC4 with HMAC is not supported/enabled)"
Thank you for providing your feedback on the effectiveness of the article.
Open new Case
Continue Searching
Knowledge Base
Community
Product Help
Training and Tutorials