IV87171: NOSUCHMETHODERROR WHEN USING IBM KRB5LOGINMODULE ON SOLARIS

APAR status

• Closed as program error.

Error description

• Error Message, as reported by customer:
  A NoSuchMethodError error is seen while doing Kerberos login
  with IBM Krb5LoginModule on Solaris. The issue happens when
  login with keytab.
  
  Stack Trace, if applicable:
  javax.security.auth.login.LoginException:
  java.lang.NoSuchMethodError:
  sun.misc.JavaxSecurityAuthKerberosAccess.keyTabGetEncryptionKeys
  (Ljavax/security/auth/kerberos/KeyTab;Lcom/ibm/security/krb5/Pri
  ncipalName;)[Lcom/ibm/security/krb5/EncryptionKey;
  
        at
  com.ibm.security.jgss.mech.krb5.Krb5Util.keysFromJavaxKeyTab(Krb
  5Util.java:17)
   at
  com.ibm.security.auth.module.Krb5LoginModule.a(Krb5LoginModule.j
  ava:452)
   at
  com.ibm.security.auth.module.Krb5LoginModule.b(Krb5LoginModule.j
  ava:136)
   at
  com.ibm.security.auth.module.Krb5LoginModule.login(Krb5LoginModu
  le.java:8)
   at sun.reflect.NativeMethodAccessorImpl.invoke0(Native
  Method)
   at
  sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessor
  Impl.java:57)
   at
  sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethod
  AccessorImpl.java:43)
   at java.lang.reflect.Method.invoke(Method.java:606)
   at
  javax.security.auth.login.LoginContext.invoke(LoginContext.java:
  762)
   at
  javax.security.auth.login.LoginContext.access$000(LoginContext.j
  ava:203)
   at
  javax.security.auth.login.LoginContext$4.run(LoginContext.java:6
  90)
   at
  javax.security.auth.login.LoginContext$4.run(LoginContext.java:6
  88)
   at java.security.AccessController.doPrivileged(Native
  Method)
   at
  javax.security.auth.login.LoginContext.invokePriv(LoginContext.j
  ava:687)
   at
  javax.security.auth.login.LoginContext.login(LoginContext.java:5
  95)
  
  Other Error Information, as reported by customer:
  N/A
  

Local fix

• N/A
  

Problem summary

• The IBM JGSS code was compiled on an IBM JDK, where the
  sun.misc.JavaxSecurityAuthKerberosAccess interface has been
  altered to use com.ibm classes in place of the com.sun classes.
   So, at runtime the IBM JGSS code triggers the NoSuchMethodError
   on Solaris, and HP, because the
  sun.misc.JavaxSecurityAuthKerberosAccess interface loaded at
  runtime does not match the one that the JGSS code was compiled
  against.
  
  
  ERROR DESCRIPTION:
  
  The IBM JGSS code triggers a NoSuchMethodError on Solaris, and
  HP, because the sun.misc.JavaxSecurityAuthKerberosAccess
  interface loaded at runtime does not match the one that the JGSS
  code was compiled against.
  

Problem conclusion

• The fix adds the JavaxSecurityAuthKerberosAccess interface to
  the IBM JGSS component packaging, so that it is independent of
  the Oracle packaged version.
  
  The associated RTC PR is 116494
  The associated Austin CMVC defect is 117439
  The associated Austin APAR is IV87171
  
  JVMs affected : Java 7.0 and Java 7.1 on Solaris, and HP
  
  The fix was delivered for 7.0 SR9 FP60, and Java 7.1 SR3 FP60
  
  The affected jars:  ibmjgssprovider.jar and ibmjgssfw.jar.
  
  The build level of this jar for the affected releases is
  "20160808"
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  TIV JAVA GSS-AP

• Fixed component ID

  TIVSECJGS

Applicable component levels

• R100 PSY

     UP