IV52959: JGSS LOOPING WITH 'CANNOT GET CREDENTIAL FROM JAAS SUBJECT'

APAR status

• Closed as program error.

Error description

• Error Message: Testing a JGSS server program, the
  GSSContext.acceptSecContext call never end and the following
  exception loops:
  <OSB>JGSS_DBG_CRED<CSB> no JAAS Subject
  org.ietf.jgss.GSSException, major code: 13, minor code: 0
          major string: Invalid credentials
          minor string: Cannot get credential from JAAS Subject
  for principal: null
  .
  Stack Trace: org.ietf.jgss.GSSException, major code: 13, minor
  code: 0
          major string: Invalid credentials
          minor string: Cannot get credential from JAAS Subject
  for principal: null
          at
  com.ibm.security.jgss.i18n.I18NException.throwGSSException(I18NE
  xception.java:15)
          at com.ibm.security.jgss.mech.krb5.bb.run(bb.java:29)
          at
  java.security.AccessController.doPrivileged(AccessController.jav
  a:327)
          at com.ibm.security.jgss.mech.krb5.y.d(y.java:417)
  ... ...
  .
  

Local fix

Problem summary

• The problem is caused by an coding error.
  

Problem conclusion

• This defect will be fixed in:
  6.0.0 SR16
  6.0.1 SR7_FP2
  7.0.0 SR7
  .
  Fixed the looping condition.
  The associated Hursley CMVC defect is 201353.
  The associated Austin CMVC defect is 115123.
  Platform affected: All platforms.
  JVMs affected: 6.0, 6.26, and 7.0.
  Jars affected: ibmjgssprovider.jar.
  The fix will be available in 160_SR15_FP2, 626_SR7_FP2, and
  170_SR7.
  Build level is 20131204.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  SECURITY

• Fixed component ID

  620700125

Applicable component levels

• R600 PSY

     UP

• R260 PSY

     UP