Hello community,
I got a problem using the "login as current user" option against a security server from outside corporate network. Login by entering username/password manually works fine from outside corporate network For internal connections using a connection server instead of security server everything works as expected without manually typing username/password.
Single domain
Horizon Client is 3.5.2 and domain joined
2x Security Server 6.2.1
2x Connection Server 6.2.1
On one of the connection servers I got the following error when trying to connect via horizon client using the "login as current user" option:
2015-12-28T20:21:15.207+01:00 INFO (0B08-0E34) <ajp-nio-8009-exec-7> [PAEContext] (SESSION:a774_***_b2fb) Idle Timer Executor using 1 thread(s)
2015-12-28T20:21:15.625+01:00 ERROR (0744-0AEC) <MessageFrameWorkDispatch> [ws_winauth] [GSSApiProcessServerContext]: Negotiate failed. Error 0x0000000080090300 (Not enough memory is available to complete this request) {SESSION:a774_***_b2fb}
2015-12-28T20:21:15.626+01:00 WARN (0B08-04B8) <ajp-nio-8009-exec-8> [GssapiHandler] (SESSION:a774_***_b2fb) GSSAPI login failed: Not enough memory is available to complete this request
2015-12-28T20:21:15.627+01:00 ERROR (0B08-04B8) <ajp-nio-8009-exec-8> [GssapiHandler] (SESSION:a774_***_b2fb) Unable to close context 7d36-***-00d3 with error: Failed to locate requested context
2015-12-28T20:21:15.627+01:00 ERROR (0B08-04B8) <ajp-nio-8009-exec-8> [GssapiAuthFilter] (SESSION:a774_***_b2fb) Problem performing GSSAPI authentication - GSSAPI_ERROR: GSSAPI failed: Not enough memory is available to complete this request
The connection server has 12GB memory in total and 9.5GB free/available memory.
In the windows event log, the following error appears:
BROKER_USER_AUTHFAILED_GENERAL
User <UNAUTHENTICATED> failed to authenticate
Attributes:
Node=hostnameofconnectionsserver.mydomain.com
Severity=AUDIT_FAIL
Time=Mon Dec 28 19:51:16 CET 2015
Module=Broker
UserDisplayName=<UNAUTHENTICATED>
Source=com.vmware.vdi.broker.filters.GssapiAuthFilter
Acknowledged=true