IZ54545: UNEXPECTED EXCEPTION THROWN WHEN EXECUTING KERBEROS RELATED JAVA CODE WITH THE IBM JAVA 6.

APAR status

• Closed as program error.

Error description

• Error Message: The internal exception is
  org.ietf.jgss.GSSException, major code: 11, minor code: 0 major
  string: General failure, unspecified at GSSAPI level minor
  string: Desired initLifetime zero or less
  .
  Stack Trace: Stacktrace
  Thread <OSB>main<CSB> (Suspended (exception GSSException))
   SPNEGOCredential.<init>(GSSNameSpi, int, int, int) line: 70
   SPNEGOMechFactory.getCredentialElement(GSSNameSpi, int, int,
  int) line: 3
   GSSManagerImpl.createMechCredential(GSSNameSpi, int, int, int,
  Oid) line: 5
   GSSCredentialImpl.add(GSSName, int, int, Oid, int) line: 75
   GSSCredentialImpl.<init>(GSSManagerImpl, GSSName, int, Oid,
  int) line: 17
   GSSManagerImpl.createCredential(GSSName, int, Oid, int) line:
  43
   GSSContextImpl.b(GSSManagerImpl, boolean, GSSName,
  Oid,GSSCredential, int) line: 52
   GSSContextImpl.<init>(GSSManagerImpl, GSSName, Oid,
  GSSCredential,int) line: 278
   GSSManagerImpl.createContext(GSSName, Oid, GSSCredential, int)
  line: 58
   NegotiatorImpl.init(String, String) line: 79
   NegotiatorImpl.<init>(String, String) line: 94
   NativeConstructorAccessorImpl.newInstance0(Constructor,
  Object<OSB><CSB>)
   line: not available <OSB>native method<CSB>
   NativeConstructorAccessorImpl.newInstance(Object<OSB><CSB>)
  line: 41
   DelegatingConstructorAccessorImpl.newInstance(Object<OSB><CSB>)
  line: 39
   Constructor<T>.newInstance(Object...) line: 515
   Negotiator.getSupported(String, String) line: 277
   NegotiateAuthentication.isSupported(String, String) line: 118
  
   AuthenticationHeader.parse() line: 182 <OSB>local variables
  unavailable<CSB>
  
   AuthenticationHeader.<init>(String, MessageHeader, String)
  line: 131
   HttpURLConnection.getInputStream() line: 1061
   HttpURLConnection(HttpURLConnection).getResponseCode() line:
  384
  .
  N/A
  

Local fix

• N/A
  

Problem summary

• Problem is that an Unexpected exception thrown when executing
  kerberos related java code with the IBM Java 6
  

Problem conclusion

• This defect will be fixed in:
  6.0.0 SR6
  .
  1) the original NegotiatorImpl.java uses
  GSSContext.DEFAULT_LIFETIME for both mechanism of Kerberos and
  SPNEGO.
  This is a problem for IBM SPNEGO.
  2) We need to use GSSContext.INDEFINITE_LIFETIME for SPNEGO
  while use the GSSContext.DEFAULT_LIFETIME for Kerbeos,
  therefore I made the change as following.
  .
  To obtain the fix:
  Install build 20090820 or later
  

Temporary fix

• N/A
  

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  JAVA CLASS LIBS

• Fixed component ID

  620700130

Applicable component levels

• R600 PSN

     UP