IBM Support

IJ53646: CHANGING THE DEFAULT OF THE COM.IBM.SECURITY.SPNEGO.MSINTEROP PROPERTY FROM TRUE TO FALSE

Subscribe to this APAR

By subscribing, you receive periodic emails alerting you to the status of the APAR, along with a link to the fix after it becomes available. You can track this item individually or track all items by product.

Notify me when this APAR changes.

Notify me when an APAR for this component changes.

 

APAR status

  • Closed as program error.

Error description

  • Error Message: InvalidToken exception
.
Stack Trace: N/A
.
The error does not happen with . net6.0, but happens with .
net8.0

Local fix

  • Set the system property com.ibm.security.spnego.msinterop to
false manually.

Problem summary

  • For Windows XP, 2000 and 2003, the system property
com.ibm.security.spnego.msinterop is true. Because those
versions of Windows do not support mechListMIC in NegTokenResp.
Windows Vista and later versions of Winsows support mechListMIC,
therefore the default was changed to false. If this property is
true and those newer versions of Windows are used, an
InvalidToken exception may occure. This value can be changed
manually if needed.

Problem conclusion

  • The default value of com.ibm.security.spnego.msinterop was
changed from true to false.
A fix is made to ibmjgssprovider.jar.
The associated Hursley RTC Problem Report is 152300
The associated JGSS GIT issue# is 113
JVMs affected: Java 8
The fix was delivered for Java8 SR8 FP45
The affected jar is "ibmjgssprovider.jar".
The build level of this jar for the affected releases is "8.0
build_20250211--208"
.
This APAR will be fixed in the following Releases:
.
IBM Semeru Runtimes
IBM SDK, Java Technology Edition
   8    SR8 FP45  (8.0.8.45)
.
Downloads and supplementary documentation can be found at the
following locations:
- For non z/OS operating systems:
  - IBM Semeru Runtimes, Version 11 and later
    https://www.ibm.com/semeru-runtimes/downloads/
  - IBM SDK, Java Technology Edition, Version 8
    https://www.ibm.com/support/pages/java-sdk-downloads/
- For the z/OS operating system:
  - Java SDK Products on z/OS
    https://www.ibm.com/support/pages/java-sdk-products-zos

Temporary fix

  • 



Comments


    

  • 



APAR Information




    

  • APAR number
    IJ53646
    • 

  • Reported component name
    SECURITY
    • 

  • Reported component ID
    620700125
    • 

  • Reported release
    270
    • 

  • Status
    CLOSED  PER
    • 

  • PE
    NoPE
    • 

  • HIPER
    NoHIPER
    • 

  • Special Attention
    NoSpecatt / Xsystem
    • 

  • Submitted date
    2025-02-18
    • 

  • Closed date
    2025-02-18
    • 

  • Last modified date
    2025-02-18
    • 





    

  • APAR is sysrouted FROM one or more of the following:
    

    • 

  • APAR is sysrouted TO one or more of the following:
    

    • 



Fix information


    

  • Fixed component name
    SECURITY
    • 

  • Fixed component ID
    620700125
    • 



Applicable component levels


    








      
              
                            

              

              [{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SSNVBF","label":"Runtimes for Java Technology"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"270","Line of Business":{"code":"LOB08","label":"Cognitive Systems"}}]
              

                                                                    

          
 
        

      

    

      

        

          

            
Document Information


            

            


                        

            Modified date:
            

            18 February 2025
            

            
                      

        


        

        


      

    

  



    

  

  
    
            

          
Page Feedback