IBM Support

JR26153: DB2 SERVER RETURNS KERBEROS PRINCIPAL NAME IN LOWER CASE WHICH MAY CAUSE PROBLEMS AS THE REALM SHOULD BE IN UPPER CASE

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • The Kerberos security in the Universal JDBC driver may not work
    and throw "java.lang.Exception:  No credential" even if the
    "kerberosServerPrincipal" property of the Universal JDBC driver
    is set properly.
    
    Since DB2 v8 FP11 the Universal JDBC driver queries the DB2
    server to retrieve the Kerberos Principal name (KERSECPPL),
    which overrides the client-side "kerberosServerPrincipal"
    property.  This APAR addresses a problem that DB2 server returns
    the Kerberos Principal name always in lowercase, which is
    incorrect, causing the exception. All Windows/UNIX platforms are
    affected.
    

Local fix

Problem summary

  • USERS AFFECTED:
    All
    
    PROBLEM DESCRIPTION:
    The Kerberos security in the Universal JDBC driver may not work
    and throw "java.lang.Exception:  No credential" even if the
    "kerberosServerPrincipal" property of the Universal JDBC driver
    is set properly.
    
    PROBLEM SUMMARY:
    Since DB2 v8 FP11 the Universal JDBC driver queries the DB2
    server to retrieve the Kerberos Principal name (KERSECPPL),
    which overrides the client-side "kerberosServerPrincipal"
    property.  This APAR addresses a problem that DB2 server returns
    the Kerberos Principal name always in lowercase, which is
    incorrect, causing the exception. All Windows/UNIX platforms are
    affected.
    

Problem conclusion

  • First fixed in DB2 UDB Version 9, FixPak 3 (s070719).
    

Temporary fix

Comments

APAR Information

  • APAR number

    JR26153

  • Reported component name

    DB2 CEE WINDOWS

  • Reported component ID

    5765F3001

  • Reported release

    910

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2007-03-14

  • Closed date

    2007-08-21

  • Last modified date

    2008-02-05

  • APAR is sysrouted FROM one or more of the following:

    JR26152

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    DB2 CEE WINDOWS

  • Fixed component ID

    5765F3001

Applicable component levels

  • R910 PSN

       UP

[{"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SSEPGG","label":"DB2 for Linux- UNIX and Windows"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"910","Line of Business":{"code":"LOB10","label":"Data and AI"}}]

Document Information

Modified date:
08 January 2022