IBM Support

PM21308; Messaging engine to messaging engine link fails with SECJ9314E

Download


Abstract

CWSIT0034E AND CWSIT0110E caused by SECJ9314E exception in WebSphere Application Server V7 and Service Integration Bus.

Download Description

PM21308 resolves the following problem:

ERROR DESCRIPTION:
The following exception is recorded in the SystemOut.log, causing a messaging engine to messaging engine communications link to fail, within a service integration bus.
CWSIT0034E and CWSIT0110E errors are also logged.
[8/13/10 17:21:54:879 CST] 0000003a Krb5LoginModu E
SECJ9314E: An unexpected exception occurred when trying to run
acceptSecContext()
method : GSSException: org.ietf.jgss.GSSException, major code:
10, minor code: 0
ext() method : GSSException: org.ietf.jgss.GSSException, major
code: 10, minor
code: 0
major string: Defective token
minor string: Bad token tag: -27
at com.ibm.security.jgss.i18n.I18NException.throwGSSException
(I18NException.java:1)
at com.ibm.security.jgss.TokenHeader.b(TokenHeader.java:63)
at com.ibm.security.jgss.TokenHeader.b(TokenHeader.java:49)

at com.ibm.security.jgss.GSSContextImpl.acceptSecContext
(GSSContextImpl.java:513)
at com.ibm.security.jgss.GSSContextImpl.acceptSecContext
(GSSContextImpl.java:427)
...

LOCAL FIX:

PROBLEM SUMMARY

USERS AFFECTED:
Users of the default messaging provider for IBM WebSphere Application Server Version 7,
with multiple messaging engines in secure service integration bus

PROBLEM DESCRIPTION:
CWSIT0034E and CWSIT0110E before SECJ9314E when using secure messaging

RECOMMENDATION:
None

The application server's security layer might not be able to accurately determine the type of the security token which the messaging engines use to authenticate with each other. When authentication fails due to incorrect detection of the token type, the messaging engines within the bus are unable to communicate with each other.

PROBLEM CONCLUSION:
The fix for this APAR updates the service integration bus code to explicitly state the security token type when authenticating a remote messaging engine within the bus. This avoids the need for the auto-detection code to run, which in turn prevents the security layer from misidentifying the token type being used.

The fix for this APAR is currently targeted for inclusion in fix pack 7.0.0.15. Please refer to the Recommended Updates page for delivery information:
http://www.ibm.com/support/docview.wss?uid=swg27004980

Prerequisites

Please download the UpdateInstaller below to install this fix.

[{"PRLabel":"UpdateInstaller","PRLang":"US English","PRSize":"7250000","PRPlat":{"label":"AIX","code":"PF002"},"PRURL":"http:\/\/www.ibm.com\/support\/docview.wss?rs=180&uid=swg21205991"}]

Installation Instructions

Please review the readme.txt for detailed installation instructions.

[{"INLabel":"Readme","INLang":"US English","INSize":"7748","INURL":"ftp:\/\/public.dhe.ibm.com\/software\/websphere\/appserv\/support\/fixes\/PM21308\/readme.txt"}]
On
[{"DNLabel":"7.0.0.5-WS-WAS-IFPM21308","DNDate":"09\/22\/2010","DNLang":"US English","DNSize":"14333","DNPlat":{"label":"AIX","code":"PF002"},"DNURL":"http:\/\/www.ibm.com\/support\/fixcentral\/quickorder?fixids=7.0.0.5-WS-WAS-IFPM21308&product=ibm%2FWebSphere%2FWebSphere+Application+Server&source=dbluesearch","DNURL_FTP":"ftp:\/\/public.dhe.ibm.com\/software\/websphere\/appserv\/support\/fixes\/PM21308\/\/7.0.0.5-WS-WAS-IFPM21308.pak","DDURL":"http:\/\/public.dhe.ibm.com:7618;sw_websphere;appserv\/support\/fixes\/PM21308\/\/7.0.0.5-WS-WAS-IFPM21308.pak"}]

Technical Support

Contact IBM Support using SR (http://www.ibm.com/software/support/probsub.html), visit the WebSphere Application Server support web site (http://www.ibm.com/software/webservers/appserv/was/support/), or contact 1-800-IBM-SERV (U.S. only).

[{"Product":{"code":"SSEQTP","label":"WebSphere Application Server"},"Business Unit":{"code":"BU004","label":"Hybrid Cloud"},"Component":"General","Platform":[{"code":"PF002","label":"AIX"},{"code":"PF010","label":"HP-UX"},{"code":"PF012","label":"IBM i"},{"code":"PF016","label":"Linux"},{"code":"PF027","label":"Solaris"},{"code":"PF033","label":"Windows"}],"Version":"7.0.0.11;7.0.0.5;7.0.0.7;7.0.0.9","Edition":"Base"}]

Document Information

Modified date:
15 June 2018

UID

swg24028017