IJ57119: KERBEROS FAILS WITH UNSATISFIEDLINKERROR DURING SYSTEM.LOADLIBRARY FOR NATIVECREDS ON NON-WINDOWS PLATFORMS.

APAR status

• Closed as program error.

Error description

• Error Message: Kerberos login fails
  .
  Stack Trace: Caused by: java.lang.UnsatisfiedLinkError:
  NativeCreds (Not
                  found in com.ibm.oti.vm.bootstrap.library.path)
  at
  
  java.lang.ClassLoader.loadLibraryWithPath(ClassLoader.java:1463)
                  at
  
  java.lang.ClassLoader.loadLibraryWithClassLoader(ClassLoader.jav
  a:1409)
                  at java.lang.System.loadLibrary(System.java:617)
  at
                  com.ibm.security.krb5.c.a(c.java:3) at
                  com.ibm.security.krb5.c.run(c.java:2) at
  
  java.security.AccessController.doPrivileged(AccessController.jav
  a:749)
                  at
  
  com.ibm.security.krb5.Credentials.ensureLoaded(Credentials.java:
  347)
                  at
  
  com.ibm.security.krb5.Credentials.acquireDefaultCreds(Credential
  s.java:120)
                  at
  
  com.ibm.security.auth.module.Krb5LoginModule.k(Krb5LoginModule.j
  ava:1011)
                  at
  
  com.ibm.security.auth.module.Krb5LoginModule.b(Krb5LoginModule.j
  ava:219)
                  at
  
  com.ibm.security.auth.module.Krb5LoginModule.login(Krb5LoginModu
  le.java:452)
  .
  

Local fix

• N/A
  

Problem summary

• Kerberos running on Non-Windows platforms incorrectly attempts
  to
              obtain login credentials from the native system by
  loading the
              NativeCreds shared library.
  

Problem conclusion

• Kerberos has been updated to only attempt loading the
  NativeCreds
              shared library on Windows platforms.
              A fix is made to IBMJGSS/ibmjgssprovider.jar
              The associated Hursley RTC Problem Report is 153490
              The associated Austin git issue IBMJGSS#144
              JVMs affected: Java 8
              The fix was delivered for Java 8SR8FP65 The affected
  jar is "ibmjgssprovider.jar".
              The build level of this jar for the affected
  releases is "20260114-588"
  
  .
  This APAR will be fixed in the following Releases:
  .
  IBM Semeru Runtimes
  IBM SDK, Java Technology Edition
     8    SR8 FP65  (8.0.8.65)
  .
  Downloads and supplementary documentation can be found at the
  following locations:
  - For non z/OS operating systems:
    - IBM Semeru Runtimes, Version 11 and later
      https://www.ibm.com/semeru-runtimes/downloads/
    - IBM SDK, Java Technology Edition, Version 8
      https://www.ibm.com/support/pages/java-sdk-downloads/
  - For the z/OS operating system:
    - Java SDK Products on z/OS
      https://www.ibm.com/support/pages/java-sdk-products-zos
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  SECURITY

• Fixed component ID

  620700125

Applicable component levels