LDAP in docker - KDC has no support for encryption type

I try to setup instance of sonarqube community (9.9) with LDAP configuration within docker container.

While starting the LDAP connection is tested and I get the following exceptions:

Caused by: org.sonar.auth.ldap.LdapException: **LDAP realm failed to start: Unable to open LDAP connection**
        at org.sonar.auth.ldap.LdapRealm.testConnections(LdapRealm.java:85)
        at org.sonar.auth.ldap.LdapRealm.<init>(LdapRealm.java:62)
        at java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
        at java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance(Unknown Source)
        at java.base/jdk.internal.reflect.DelegatingConstructorAccessorImpl.newInstance(Unknown Source)
        at java.base/java.lang.reflect.Constructor.newInstanceWithCaller(Unknown Source)
        at java.base/java.lang.reflect.Constructor.newInstance(Unknown Source)
        at org.springframework.beans.BeanUtils.instantiateClass(BeanUtils.java:211)
        ... 101 common frames omitted
Caused by: org.sonar.auth.ldap.LdapException: **Unable to open LDAP connection**
        at org.sonar.auth.ldap.LdapContextFactory.testConnection(LdapContextFactory.java:214)
        at org.sonar.auth.ldap.LdapRealm.testConnections(LdapRealm.java:79)
        ... 108 common frames omitted
Caused by: javax.naming.NamingException: **KDC has no support for encryption type (14)**
        at org.sonar.auth.ldap.LdapContextFactory.createInitialDirContextUsingGssapi(LdapContextFactory.java:159)
        at org.sonar.auth.ldap.LdapContextFactory.createBindContext(LdapContextFactory.java:93)
        at org.sonar.auth.ldap.LdapContextFactory.testConnection(LdapContextFactory.java:210)
        ... 109 common frames omitted

What kind of “encryption type” is used from sonarqube to connect the server?
How it may be configured in the container and/or the host system?

Thanks!

Hi,

You should talk to your LDAP admin about this.

It looks like you’re trying to use Kerberos, but that’s not one of the supported options

 
HTH,
Ann