IBM Support

IV16528: WHEN A KERBEROS ERROR IS SENT BACK FROM THE KDC WHERE A TGS-REP IS EXPECTED, THE MESSAGE "UNEXPECTED ASN1 IDENTIFIER" IS PRINTED

Subscribe to this APAR

By subscribing, you receive periodic emails alerting you to the status of the APAR, along with a link to the fix after it becomes available. You can track this item individually or track all items by product.

Notify me when this APAR changes.

Notify me when an APAR for this component changes.

 

APAR status

  • Closed as program error.

Error description

  • When a Kerberos error is sent back from the KDC where a TGS-REP
is expected, the stack trace below is printed

com.ibm.security.krb5.Asn1Exception, status code: 906
       message: Unexpected ASN1 identifier
       at
com.ibm.security.krb5.internal.KDCRep.b(KDCRep.java:58)
       at com.ibm.security.krb5.internal.TGSRep.b(TGSRep.java:8)
       at
com.ibm.security.krb5.internal.TGSRep.<init>(TGSRep.java:6)
       at com.ibm.security.krb5.KrbTgsRep.<init>(KrbTgsRep.java)
       at
com.ibm.security.krb5.KrbTgsReq.getReply(KrbTgsReq.java:143)
       at com.ibm.security.krb5.internal.n.f(n.java:205)
       at com.ibm.security.krb5.internal.n.d(n.java:29)
       at
com.ibm.security.krb5.Credentials.acquireSvcCreds(Credentials.ja
va:615)
       at com.ibm.security.jgss.mech.krb5.ub.b(ub.java:17)
       at
com.ibm.security.jgss.mech.krb5.ub.initSecContext(ub.java:698)
       at
com.ibm.security.jgss.mech.spnego.SPNEGOContext.b(SPNEGOContext.
java:681)
       at
com.ibm.security.jgss.mech.spnego.SPNEGOContext.initSecContext(S
PNEGOContext.java:122)
       at
com.ibm.security.jgss.GSSContextImpl.initSecContext(GSSContextIm
pl.java:402)
       at
com.ibm.security.jgss.GSSContextImpl.initSecContext(GSSContextIm
pl.java:85)


JVM affected:
5.0, 6.0, 6.26, 7.0

Local fix

  • N/A

Problem summary

  • ERROR DESCRIPTION:

When a kerberos error is sent back from the KDC where a TGS-REP
is expected, sometime the stack trace of the
com.ibm.security.krb4.Asn1Exception with the message "Unexpected
ASN1 identifier" will be printed on system.out. The fix is not
to throw the exception when  it is not an issue.

Problem conclusion

  • JARs affected:

ibmjgssprovider.jar

JVMs affected:
JDK 5.0, 6.0, 7.0

This fix will be in
Java 5.0 SR 14
Hursley CMVC defect 189970.
The build date  is 20120316.

Java 6.0 SR11, Java626 SR2,
Hursley CMVC defect 189970.
The build date  is 20120319

Java 7.0 SR1
Hursley CMVC defect 189715.
The build date  is 20120316

Temporary fix

  • 



Comments


    

  • 



APAR Information




    

  • APAR number
    IV16528
    • 

  • Reported component name
    TIV JAVA GSS-AP
    • 

  • Reported component ID
    TIVSECJGS
    • 

  • Reported release
    100
    • 

  • Status
    CLOSED  PER
    • 

  • PE
    NoPE
    • 

  • HIPER
    NoHIPER
    • 

  • Special Attention
    NoSpecatt
    • 

  • Submitted date
    2012-03-01
    • 

  • Closed date
    2012-03-21
    • 

  • Last modified date
    2012-03-21
    • 





    

  • APAR is sysrouted FROM one or more of the following:
    

    • 

  • APAR is sysrouted TO one or more of the following:
    

    • 



Fix information


    

  • Fixed component name
    TIV JAVA GSS-AP
    • 

  • Fixed component ID
    TIVSECJGS
    • 



Applicable component levels


    

  • R100  PSY
       UP
    • 








      
              
                            

              

              [{"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSCZL44","label":"JGSS"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"100","Edition":"","Line of Business":{"code":"","label":""}}]
              

                                                                    

          
 
        

      

    

      

        

          

            
Document Information


            

            


                        

            Modified date:
            

            21 March 2012
            

            
                      

        


        

        


      

    

  



    

  

  
    
            

          
Page Feedback