IV71405: JGSS CANNOT GET KDC FROM DNS.

APAR status

• Closed as program error.

Error description

• Error Message, as reported by customer:
  The test failed to retrieve KDC information from DNS.
  dns_lookup_dns and dns_lookup_realm have been set in krb5.ini.
  
  Stack Trace, if applicable:
  [KRB_DBG_CFG] Config:main:   getKDCFromDNS: Cannot locate DNS
  SRV record.
  [KRB_DBG_CFG] Config:main:   getKDCList: Cannot locate KDC.
  Exception in thread "main"
  java.lang.reflect.InvocationTargetException
          at sun.reflect.NativeMethodAccessorImpl.invoke0(Native
  Method)
          at
  sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessor
  Impl.java:94)
          at
  sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethod
  AccessorImpl.java:55)
          at java.lang.reflect.Method.invoke(Method.java:619)
          at
  org.eclipse.jdt.internal.jarinjarloader.JarRsrcLoader.main(JarRs
  rcLoader.java:58)
  Caused by: javax.security.auth.login.FailedLoginException:
  Login error: com.ibm.security.krb5.KrbException, status code: 0
          message: Cannot find KDC for realm <REALM>
          at
  com.ibm.security.jgss.i18n.I18NException.throwFailedLoginExcepti
  on(I18NException.java:181)
          at
  com.ibm.security.auth.module.Krb5LoginModule.kerberosLogin(Krb5L
  oginModule.java:1850)
          at
  com.ibm.security.auth.module.Krb5LoginModule.doLogin(Krb5LoginMo
  dule.java:477)
          at
  com.ibm.security.auth.module.Krb5LoginModule.login(Krb5LoginModu
  le.java:316)
          at sun.reflect.NativeMethodAccessorImpl.invoke0(Native
  Method)
          at
  sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessor
  Impl.java:94)
          at
  sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethod
  AccessorImpl.java:55)
          at java.lang.reflect.Method.invoke(Method.java:619)
  
  Other Error Information, as reported by customer:
  N/A
  

Local fix

• N/A
  

Problem summary

• JGSS cannot retrieve KDC information from DNS.
  
  ERROR DESCRIPTION:
  The test failed to retrieve KDC information from DNS.
  dns_lookup_dns and dns_lookup_realm have been set in krb5.ini.
  

Problem conclusion

• The protocol name is not correct when retrieving KDC. Coding
  error has been fixed.
  The corresponding Austin defect is 116488.
  The corresponding RTC Problem Report is 88078.
  Platform affected: All platforms.
  JVMs affected: 7.0, 7.27, 8.0.
  Jars affected: ibmjgssprovider.jar.
  The fix will be available in 170_SR9, 727_SR3, 180_SR1.
  Build level is 20150325.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  TIV JAVA GSS-AP

• Fixed component ID

  TIVSECJGS

Applicable component levels

• R100 PSY

     UP