IV54269: CROSS REALM AUTH FAILED WITH 'MESSAGE STREAM MODIFIED'

APAR status

• Closed as program error.

Error description

• Error Message: Cross realm authentication failed with "Message
  stream modified" exception.
  .
  Stack Trace: 2013-12-20 16:02:33.092     24
  com.ibm.security.krb5.internal.KrbException, status code: 41
   message: Message stream modified
  2013-12-20 16:02:33.092     24  at
  com.ibm.security.krb5.n.a(n.java:13)
  2013-12-20 16:02:33.092     24  at
  com.ibm.security.krb5.KrbTgsRep.<init>(KrbTgsRep.java:56)
  2013-12-20 16:02:33.092     24  at
  com.ibm.security.krb5.KrbTgsReq.getReply(KrbTgsReq.java:135)
  2013-12-20 16:02:33.092     24  at
  com.ibm.security.krb5.internal.o.e(o.java:253)
  2013-12-20 16:02:33.092     24  at
  com.ibm.security.krb5.internal.o.d(o.java:167)
  2013-12-20 16:02:33.092     24  at
  com.ibm.security.krb5.Credentials.acquireSvcCreds(Credentials.ja
  va:430)
  .
  

Local fix

Problem summary

• The problem is caused by improper searching method for realm
  name based on the host name.
  

Problem conclusion

• This APAR will be fixed in the following Java Releases:
     6    SR16      (6.0.16.0)
     6 R1 SR8       (6.1.8.0)
     7    SR7       (7.0.7.0)
     7 R1 SR1       (7.1.1.0)
     5.0  SR16 FP6  (5.0.16.6)
  .
  Optimized searching method.
  The associated Hursley CMVC defect is 201798.
  The associated Austin CMVC defect is 115186.
  Platform affected: All platforms.
  JVMs affected: 5.0, 6.0, 6.26, 7.0, and 7.27.
  Jars affected: ibmjgssprovider.jar.
  The fix will be available in 150_SR16_FP6, 160_SR15_FP2,
  626_SR8, 170_SR7, and 727_SR1.
  Build level is 20140117.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  IV54270

Fix information

• Fixed component name

  SECURITY

• Fixed component ID

  620700125

Applicable component levels

• R600 PSY

     UP

• R260 PSY

     UP