IBM Support

IZ66127: DELEGATED CREDENTIALS NEED TO BE STORED IN THE SUBJECT (IBM JGSS)

Direct links to fixes

6.1.0-ISS-TAM-IF0036-WIN
6.1.0-ISS-TAM-IF0036-SOL-X86
6.1.0-ISS-TAM-IF0036-SOL
6.1.0-ISS-TAM-IF0036-S390
6.1.0-ISS-TAM-IF0036-LIN-PPC
6.1.0-ISS-TAM-IF0036-LIN
6.1.0-ISS-TAM-IF0036-HP-IA64
6.1.0-ISS-TAM-IF0036-HP
6.1.0-ISS-TAM-IF0036-AIX
6.1.0-ISS-TAM-IF0035-WIN
6.1.0-ISS-TAM-IF0035-SOL-X86
6.1.0-ISS-TAM-IF0035-SOL
6.1.0-ISS-TAM-IF0035-S390
6.1.0-ISS-TAM-IF0035-LIN-PPC
6.1.0-ISS-TAM-IF0035-LIN
6.1.0-ISS-TAM-IF0035-HP-IA64
6.1.0-ISS-TAM-IF0035-HP
6.1.0-ISS-TAM-IF0035-AIX
6.1.0-ISS-TAM-IF0032-WIN
6.1.0-ISS-TAM-IF0032-SOL-X86
6.1.0-ISS-TAM-IF0032-SOL
6.1.0-ISS-TAM-IF0032-S390
6.1.0-ISS-TAM-IF0032-LIN-PPC
6.1.0-ISS-TAM-IF0032-LIN
6.1.0-ISS-TAM-IF0032-HP-IA64
6.1.0-ISS-TAM-IF0032-HP
6.1.0-ISS-TAM-IF0032-AIX
6.1.0-ISS-TAM-IF0031-WIN
6.1.0-ISS-TAM-IF0031-SOL-X86
6.1.0-ISS-TAM-IF0031-SOL
6.1.0-ISS-TAM-IF0031-S390
6.1.0-ISS-TAM-IF0031-LIN-PPC
6.1.0-ISS-TAM-IF0031-LIN
6.1.0-ISS-TAM-IF0031-HP-IA64
6.1.0-ISS-TAM-IF0031-HP
6.1.0-ISS-TAM-IF0031-AIX
6.1.0-ISS-TAM-FP0026-LIN
6.1.0-ISS-TAM-FP0026-WIN
6.1.0-ISS-TAM-FP0026-SOL
6.1.0-ISS-TAM-FP0026-SOL-X86
6.1.0-ISS-TAM-FP0026-S390
6.1.0-ISS-TAM-FP0026-LIN-PPC
6.1.0-ISS-TAM-FP0026-HP
6.1.0-ISS-TAM-FP0026-HP-IA64
6.1.0-ISS-TAM-FP0026-AIX
6.1.0-ISS-TAM-IF0020-WIN
6.1.0-ISS-TAM-IF0020-SOL-X86
6.1.0-ISS-TAM-IF0020-SOL
6.1.0-ISS-TAM-IF0020-S390
6.1.0-ISS-TAM-IF0020-LIN
6.1.0-ISS-TAM-IF0020-LIN-PPC
6.1.0-ISS-TAM-IF0020-HP
6.1.0-ISS-TAM-IF0020-HP-IA64
6.1.0-ISS-TAM-IF0020-AIX
6.1.0-ISS-TAM-IF0018-WIN
6.1.0-ISS-TAM-IF0018-SOL-X86
6.1.0-ISS-TAM-IF0018-SOL
6.1.0-ISS-TAM-IF0018-S390
6.1.0-ISS-TAM-IF0018-LIN-PPC
6.1.0-ISS-TAM-IF0018-LIN
6.1.0-ISS-TAM-IF0018-HP-IA64
6.1.0-ISS-TAM-IF0018-HP
6.1.0-ISS-TAM-IF0018-AIX
6.1.0-ISS-TAM-IF0016-WIN
6.1.0-ISS-TAM-IF0016-SOL-X86
6.1.0-ISS-TAM-IF0016-SOL
6.1.0-ISS-TAM-IF0016-S390
6.1.0-ISS-TAM-IF0016-LIN-PPC
6.1.0-ISS-TAM-IF0016-LIN
6.1.0-ISS-TAM-IF0016-HP-IA64
6.1.0-ISS-TAM-IF0016-HP
6.1.0-ISS-TAM-IF0016-AIX
Tivoli Access Manager for e-Business WebSEAL, Patch 6.1.0-TIV-AWS-FP0007
Tivoli Access Manager for e-Business Base, Patch 6.1.0-ISS-TAM-FP0009
Tivoli Access Manager for e-Business WebSEAL, Patch 6.1.0-ISS-AWS-FP0009
Tivoli Access Manager for e-Business WebSEAL, Patch 6.1.0-ISS-AWS-IF0010

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • Envt: IBM JGSS / IBM JDK 150
    
    Description: User needs to use the delegated credential
    from acceptor side to act as initiator for further Kerberos
    authentication; the delegated credential needs to be stored in
    the subject.
    
    Affected JARs:
    ==============
    ibmjgssprovider.jar
    
    Affected JVMs:
    ==============
    IBM Java 1.4.2, Java 5.0. Only Java 5.0 will be backported to
    support this.
    

Local fix

  • Level 3 to update
    

Problem summary

  • User needs to use the delegated credential
    from acceptor side to act as initiator for further Kerberos
    authentication; the delegated credential needs to be stored in
    the subject. This is supported in Java 6.0, it needs to be back
    ported to Java 5.0.
    

Problem conclusion

  • IBM JDK 1.4.2, Java 5.0. Only Java 5.0 will support this.
    
    This fix will be in
    Java 5.0 SR 11 FP2
    The build date  is 20091202. Hursley CMVC defect number is
    162868.
    

Temporary fix

Comments

APAR Information

  • APAR number

    IZ66127

  • Reported component name

    TIV JAVA GSS-AP

  • Reported component ID

    TIVSECJGS

  • Reported release

    100

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2009-12-01

  • Closed date

    2010-03-05

  • Last modified date

    2010-04-29

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    TIV JAVA GSS-AP

  • Fixed component ID

    TIVSECJGS

Applicable component levels

  • R100 PSY

       UP

[{"Line of Business":{"code":"LOB10","label":"Data and AI"},"Business Unit":{"code":"BU008","label":"Security"},"Product":{"code":"SSWKFH","label":"Tivoli Components - Java Security"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"100"}]

Document Information

Modified date:
07 October 2021