Before rejecting, I have already searched through SAP Notes and Forum's. Sharing my findings below
BI 4.1 SP 4.4 + Explorer 4.1 SP 4.4 + Design Studio
Windows 2012 server with SQL 2012 repository
Issue has been seen on BI 4.1 SP 2.3 + Explorer 4.1 SP 2.3
Issue is not specific to any single server or clustered environment. Service account password doesn't have special character in it.
C:\Windows\system32>"F:\Program Files (x86)\SAP BusinessObjects\SAP BusinessObjects Enterprise XI 4.0\win64_x64\sapjvm\bin\kinit.exe" -k -t c:\windows\host.keytab Service_Account@DOMAIN.COM
Exception: krb_error 24 Pre-authentication information was invalid (24) Pre-authentication information was invalid
KrbException: Pre-authentication information was invalid (24)
at sun.security.krb5.KrbAsRep.<init>(KrbAsRep.java:66)
at sun.security.krb5.KrbAsReq.getReply(KrbAsReq.java:446)
at sun.security.krb5.internal.tools.Kinit.sendASRequest(Kinit.java:306)
at sun.security.krb5.internal.tools.Kinit.<init>(Kinit.java:257)
at sun.security.krb5.internal.tools.Kinit.main(Kinit.java:107)
Caused by: KrbException: Identifier doesn't match expected value (906)
at sun.security.krb5.internal.KDCRep.init(KDCRep.java:133)
at sun.security.krb5.internal.ASRep.init(ASRep.java:58)
at sun.security.krb5.internal.ASRep.<init>(ASRep.java:53)
at sun.security.krb5.KrbAsRep.<init>(KrbAsRep.java:50)
... 4 more
KDC has the correct domain controller name.
No duplicate SPN's for the service account.
Have already tried the kinit command with a differrent JDK version
Password doesn't have any special character.
The same service account if used with a Windows 2008 server works fine.
No issues with any 3.1 environment.
We have also raised an SAP ticket on this, but no help is able to resolve the issue.
Any inputs on the issue?