Access Keys:
Skip to content (Access Key - 0)

Q: Kerberos for Windows error -- Incorrect Net address


The specific error is:

     GSS-API(Maj): Miscellaneous failure
     GSS-API(Min): Incorrect Net address

This error seems to happen only when your computer is behind a firewall or is using IP forwarding for its network address. The kerberos ticket has the true address of your computer in it, and SAP is looking at the apparent address of your computer (often this is the firewall or ip-forwarding-server) and they don't match. When they don't match, SAP thinks you're being tricky and won't let you in.

As of August 2002, you can solve this problem on Windows computers by obtaining "address-less tickets". These tickets apparently do not embed the IP address and pass the validity test in services that use Kerberos, such as SAP and the MIT email servers.

The easiest way to get address-less tickets is to install and use KfW.

To read about alternative methods of obtaining address-less tickets, see Obtaining Address-less Tickets in Kerberos for Windows.

IS&T Contributions

Documentation and information provided by IS&T staff members

Last Modified:

December 18, 2015

Get Help

Request help
from the Help Desk
Report a security incident
to the Security Team
c-kerberos-win c-kerberos-win Delete
kerberos kerberos Delete
windows windows Delete
error error Delete
net net Delete
address address Delete
Enter labels to add to this page:
Please wait 
Looking for a label? Just start typing.
This product/service is:
Easy to use
Difficult to use

This article is:
Adaptavist Theme Builder (4.2.3) Powered by Atlassian Confluence 3.5.13, the Enterprise Wiki