IV79323: JGSS THROWS EXCEPTION WHEN DEFAULT REALM IS NOT AVAILABLE.

APAR status

• Closed as program error.

Error description

• Error Message: JGSS throws exception when default_realm is not
  found in Kerberos config file.
  .
  Stack Trace: Caused by: org.ietf.jgss.GSSException, major code:
  11, minor code: 0
      major string: General failure, unspecified at GSSAPI level
      minor string: Error: java.lang.Exception: Error:
  com.ibm.security.krb5.KrbException, status code: 0
      message: Cannot find default realm
      at
  com.ibm.security.jgss.i18n.I18NException.throwGSSException(I18NE
  xception.java:8)
      at com.ibm.security.jgss.mech.krb5.n.a(n.java:196)
      at
  com.ibm.security.jgss.mech.krb5.n.initSecContext(n.java:636)
      at
  com.ibm.security.jgss.GSSContextImpl.initSecContext(GSSContextIm
  pl.java:193)
      at
  com.ibm.security.jgss.GSSContextImpl.initSecContext(GSSContextIm
  pl.java:463)
  .
  

Local fix

Problem summary

• When retrieving default realm, if default_realm is not available
  in Kerberos config file, exception is thrown. This exception
  should be handled by the caller.
  

Problem conclusion

• Handled exception when retrieving default realm.
  The corresponding Austin defect is 117104.
  The corresponding RTC Problem Report is 104216.
  Platform affected: All platforms.
  JVMs affected: 6.0, 6.26, 7.0, 7.27, and 8.0.
  Jars affected: ibmjgssprovider.jar.
  The fix will be available in 160_SR16_FP30, 626_SR8_FP30,
  170_SR9_FP30, 727_SR3_FP30, 180_SR2_FP10.
  Build level is 20151127.
  .
  This APAR will be fixed in the following Java Releases:
     7    SR9 FP30  (7.0.9.30)
     6 R1 SR8 FP20  (6.1.8.20)
     8    SR2 FP10  (8.0.2.10)
     6    SR16 FP20 (6.0.16.20)
     7 R1 SR3 FP30  (7.1.3.30)
  .
  Contact your IBM Product's Service Team for these Service
  Refreshes and Fix Packs.
  For those running stand-alone, information about the available
  Service Refreshes and Fix Packs can be found at:
             https://www.ibm.com/developerworks/java/jdk/
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  SECURITY

• Fixed component ID

  620700125

Applicable component levels

• R260 PSY

     UP

• R270 PSY

     UP

• R600 PSY

     UP