PI82212: RACF PASSTICKETS IN Z/OS JAAS FAIL WHEN USED WITH JAASLOGINMODULE AND OS390LOGINMODULE

APAR status

• Closed as program error.

Error description

• Error Message: RACF PassTickets in z/OS JAAS fail when used with
  JAASLoginModule and OS390LoginModule:
  .
  Stack Trace: javax.security.auth.login.FailedLoginException:
  Incorrect user password
  .at
  com.ibm.security.auth.module.JAASLoginModule.login(JAASLoginModu
  le.java:
  224
  .at
  javax.security.auth.login.LoginContext.invoke(LoginContext.java:
  781)
  .at
  javax.security.auth.login.LoginContext.access£000(LoginContext.j
  ava:215)
  .at
  javax.security.auth.login.LoginContext£4.run(LoginContext.java:7
  06)
  .at
  javax.security.auth.login.LoginContext£4.run(LoginContext.java:7
  04)
  .at
  java.security.AccessController.doPrivileged(AccessController.jav
  a:492)
  .at
  javax.security.auth.login.LoginContext.invokePriv(LoginContext.j
  ava:703)
  .at
  javax.security.auth.login.LoginContext.login(LoginContext.java:6
  09)
  .
  

Local fix

Problem summary

• RACF PassTickets in z/OS JAAS are not supported when used with
  JAASLoginModule and OS390LoginModule.
  

Problem conclusion

• Javadoc doucmentation for JAASLoginModule and OS390LoginModules
  will be updated to clarify which passwords are supported and to
  indicate PassTickets are not supported. The javadoc changes will
  be added to the next release
  .
  This APAR will be fixed in the following Java Releases:
     8    SR4 FP10  (8.0.4.10)
     6    SR16 FP50 (6.0.16.50)
     7    SR10 FP10 (7.0.10.10)
     6 R1 SR8 FP50  (6.1.8.50)
     7 R1 SR4 FP10  (7.1.4.10)
  .
  Contact your IBM Product's Service Team for these Service
  Refreshes and Fix Packs.
  For those running stand-alone, information about the available
  Service Refreshes and Fix Packs can be found at:
             https://www.ibm.com/developerworks/java/jdk/
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  JAVA Z/OS 64

• Fixed component ID

  620700104

Applicable component levels

• R800 PSY

     UP

• R600 PSY

     UP

• R700 PSY

     UP

• R601 PSY

     UP

• R710 PSY

     UP