IJ11149: JAASPRINCIPAL PROVIDED NAME IS NULL ERROR IN WINDOWS AZUREAD ENVIRONMENT.

IBM Tivoli Monitoring: Unix(R) OS Agent 6.3.0.7-TIV-ITM_UNIX-IF0003
IBM Tivoli Monitoring: Unix(R) OS Agent 6.3.0.6-TIV-ITM_UNIX-IF0004
IBM Tivoli Monitoring: Unix(R) OS Agent 6.3.0.7-TIV-ITM_UNIX-IF0004

APAR status

• Closed as program error.

Error description

• Error Message: JAASPrincipal throws
  java.lang.IllegalArgumentException: provided null name.
  .
  Stack Trace: Customer reports the following error from a test
  case in their Windows AzureAD environment:
  Before construct Win64System
  No mapping between account names and security IDs was done.
          <OSB>JAASLoginModule<CSB> succeeded importing info:
              user name = XXYYZZ
              user SID =
  S-1-12-1-731028960-1096896208-158070199-1005826882
              user domain = AzureAD
  java.lang.IllegalArgumentException: provided null name
  after construct Win64System
      at
  com.ibm.security.auth.JAASPrincipal.<init>(JAASPrincipal.java:76
  )
      at
  com.ibm.security.auth.DomainIDPrincipal.<init>(DomainIDPrincipal
  .java:65)
      at
  com.ibm.security.auth.module.JAASLoginModule.login(JAASLoginModu
  le.java:176)
      at Main.main(Main.java:20)
  Disconnected from the target VM, address: '127.0.0.1:56788',
  transport: 'socket'
  getting access token
    <OSB>getToken<CSB> got user access token
  getting user info
    <OSB>getUser<CSB> Got TokenUser info
    <OSB>getUser<CSB> userName: XXYYZZ, domainName = AzureAD
    <OSB>getUser<CSB> userSid:
  S-1-12-1-731028960-1096896208-158070199-1005826882
    <OSB>getUser<CSB> LookupAccountName error: 1332
  getting primary group
    <OSB>getPrimaryGroup<CSB> Got TokenPrimaryGroup info
    <OSB>getPrimaryGroup<CSB> primaryGroup:
  S-1-12-1-731028960-1096896208-158070199-1005826882
  getting supplementary groups
    <OSB>getGroups<CSB> Got TokenGroups info
    <OSB>getGroups<CSB> group 0: S-1-16-8192
    <OSB>getGroups<CSB> group 1: S-1-1-0
    <OSB>getGroups<CSB> group 2:
  S-1-5-21-1053931748-2307000595-3209804414-1002
    <OSB>getGroups<CSB> group 3: S-1-5-32-544
    <OSB>getGroups<CSB> group 4: S-1-5-32-559
    <OSB>getGroups<CSB> group 5: S-1-5-32-545
    <OSB>getGroups<CSB> group 6: S-1-5-4
    <OSB>getGroups<CSB> group 7: S-1-2-1
    <OSB>getGroups<CSB> group 8: S-1-5-11
    <OSB>getGroups<CSB> group 9: S-1-5-15
    <OSB>getGroups<CSB> group 10: S-1-5-5-0-1315436
    <OSB>getGroups<CSB> group 11: S-1-2-0
    <OSB>getGroups<CSB> group 12: S-1-5-64-36
  Process finished with exit code 0
  .
  N/A
  

Local fix

• N/A
  

Problem summary

• JAASPrincipal "provided name is null" error in Windows AzureAD
  environment.
  

Problem conclusion

• Updated JAASPrincipal to allow empty name string in constructor
  for Windows platforms.
  The associated RTC PR is 139554
  The associated Austin CMVC defect is N/A
  The associated Austin APAR is IJ10831
  JVMs affected: Java 7 & 8
  The fix was delivered for: Java 7 SR10 FP40 (level 20181106_01),
  Java 7.1 SR4 FP40 (level 20181106_01), Java 8 SR5 FP30 (level
  20181102_04)
  The affected jars: rt.jar
  .
  This APAR will be fixed in the following Java Releases:
     8    SR5 FP30  (8.0.5.30)
     7 R1 SR4 FP40  (7.1.4.40)
     7    SR10 FP40 (7.0.10.40)
  .
  Contact your IBM Product's Service Team for these Service
  Refreshes and Fix Packs.
  For those running stand-alone, information about the available
  Service Refreshes and Fix Packs can be found at:
             https://www.ibm.com/developerworks/java/jdk/
  

Temporary fix

• N/A
  

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  SECURITY

• Fixed component ID

  620700125

Applicable component levels

• R270 PSY

     UP

• R260 PSY

     UP