IV79831: JGSS DOES NOT RECOGNIZE ARCFOUR-HMAC-MD5 AS AN ENCRYPTION TYPE.

APAR status

• Closed as program error.

Error description

• Error Message: JGSS application failed to perform Kerberos login
  with encryption type arcfour-hmac-md5.
  .
  Stack Trace: Caused by:
  javax.security.auth.login.FailedLoginException: Login error:
  com.ibm.security.krb5.KrbException, status code: 0
      message: Key etype did not match the etype in encPart.
      at
  com.ibm.security.jgss.i18n.I18NException.throwFailedLoginExcepti
  on(I18NException.java:3)
      at
  com.ibm.security.auth.module.Krb5LoginModule.a(Krb5LoginModule.j
  ava:399)
      at
  com.ibm.security.auth.module.Krb5LoginModule.b(Krb5LoginModule.j
  ava:73)
      at
  com.ibm.security.auth.module.Krb5LoginModule.login(Krb5LoginModu
  le.java:825)
  .
  

Local fix

• Use rc4-hmac or arcfour-hmac
  

Problem summary

• Encryption type alias arcfour-hmac-md5 is not recognized.
  

Problem conclusion

• Added support for encryption type alias arcfour-hmac-md5 and
  arcfour-hmac-md5-exp.
  The corresponding Austin defect is 117134.
  The corresponding RTC Problem Report is 105186.
  Platform affected: All platforms.
  JVMs affected: 6.0, 6.26, 7.0, 7.27, and 8.0.
  Jars affected: ibmjgssprovider.jar.
  The fix will be available in 160_SR16_FP20, 626_SR8_FP20,
  170_SR9_FP30, 727_SR3_FP30, 180_SR2_FP10.
  Build level is 20151216.
  .
  This APAR will be fixed in the following Java Releases:
     6    SR16 FP20 (6.0.16.20)
     8    SR2 FP10  (8.0.2.10)
     7 R1 SR3 FP30  (7.1.3.30)
     6 R1 SR8 FP20  (6.1.8.20)
     7    SR9 FP30  (7.0.9.30)
  .
  Contact your IBM Product's Service Team for these Service
  Refreshes and Fix Packs.
  For those running stand-alone, information about the available
  Service Refreshes and Fix Packs can be found at:
             https://www.ibm.com/developerworks/java/jdk/
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  SECURITY

• Fixed component ID

  620700125

Applicable component levels

• R600 PSY

     UP

• R270 PSY

     UP

• R260 PSY

     UP