IV83529: IPV6 ADDRESS TYPE IS NOT CORRECT

APAR status

• Closed as program error.

Error description

• Error Message, as reported by customer:
  Kerberos server after receiving TGS-REQ message with this wrong
  address type returns KRB-ERROR message with error code 41
  (KRB5KRB_AP_ERR_MODIFIED).
  The problem occurs during client's call
  GSSContext.initSecContext() method.
  Changing the address type value in debugger to 24 it starts to
  work as expected.
  
  Stack Trace, if applicable:
  N/A
  
  Other Error Information, as reported by customer:
  N/A
  

Local fix

• N/A
  

Problem summary

• IPv6 address type is not correct.
  
  
  ERROR DESCRIPTION:
  
  Kerberos server after receiving TGS-REQ message with this wrong
  address type returns KRB-ERROR message with error code 41
  (KRB5KRB_AP_ERR_MODIFIED).
  The problem occurs during client's call
  GSSContext.initSecContext() method.
  Changing the address type value in debugger to 24 it starts to
  work as expected.
  

Problem conclusion

• Corrected IPv6 type based on RFC 4120.
  
  The associated Austin defect is 117212.
  The associated RTC Problem Report is 110739.
  The associated Austin APAR is IV83529.
  Platform affected: All platforms.
  
  JVMs affected: 6.0, 6.26, 7.0, 7.27, and 8.0.
  Jars affected: ibmjgssprovider.jar.
  The fix will be available in 160_SR16FP30, 626_SR8FP30,
  170_SR9FP50, 727_SR3FP50, and 180_SR3FP10.
  Build level is 20160411.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  TIV JAVA GSS-AP

• Fixed component ID

  TIVSECJGS

Applicable component levels

• R100 PSY

     UP