Bug 1143931

Summary: [QE] (6.4.0) SAML2KerberosAuthenticationTestCase fails on RHEL7 w/ OpenJDK6
Product: [JBoss] JBoss Enterprise Application Platform 6 Reporter: Petr Kremensky <pkremens>
Component: TestsuiteAssignee: jboss-set
Status: CLOSED EOL QA Contact: Petr Kremensky <pkremens>
Severity: high Docs Contact:
Priority: unspecified    
Version: 6.4.0CC: cdewolf, jason.greene, pkremens, pslavice
Target Milestone: ---   
Target Release: EAP 6.4.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2019-08-19 12:45:57 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1189141    
Bug Blocks:    

Description Petr Kremensky 2014-09-18 09:36:48 UTC
Description of problem:
org.jboss.as.test.integration.security.picketlink.SAML2KerberosAuthenticationTestCase
 - testJDukeRoles
 - testJDukePrincipal

Fails on RHEL7 w/ OpenJDK6
 java version "1.6.0_30"
 OpenJDK Runtime Environment (IcedTea6 1.13.1) (rhel-5.1.13.1.el7-x86_64)
 OpenJDK 64-Bit Server VM (build 23.25-b01, mixed mode)

Version-Release number of selected component (if applicable):
 EAP 6.4.0.DR1.1

How reproducible:
 Always

Steps to Reproduce:
 1. ./integration-tests.sh -Dmaven.repo.local=$REPO -Dts.noSmoke -Dintegration.module -Dts.basic -Dtest=org.jboss.as.test.integration.security.picketlink.SAML2KerberosAuthenticationTestCase
REPO=http://download.eng.rdu2.redhat.com/devel/candidates/JBEAP/JBEAP-6.4.0.DR1.1/jboss-eap-6.4.0.DR1.1-testsuite-local-repository.zip

Additional info:
Reproducer job:
https://jenkins.mw.lab.eng.bos.redhat.com/hudson/job/eap-640-as-testsuite-SAML2KerberosAuthenticationTestCase/
Test outputs:
https://jenkins.mw.lab.eng.bos.redhat.com/hudson/job/eap-640-as-testsuite-SAML2KerberosAuthenticationTestCase/2/#showFailuresLink
Server&test logs:
https://jenkins.mw.lab.eng.bos.redhat.com/hudson/job/eap-640-as-testsuite-SAML2KerberosAuthenticationTestCase/jdk=openjdk1.6_local,label_exp=eap-sustaining%20&&%20EAP-RHEL7/

Comment 1 Petr Kremensky 2014-09-18 11:31:24 UTC
Fails also on IPv6

RHEL + OpenJDK6
javax.security.auth.login.LoginException: [2620
	at com.sun.security.auth.module.Krb5LoginModule.attemptAuthentication(Krb5LoginModule.java:717)
	at com.sun.security.auth.module.Krb5LoginModule.login(Krb5LoginModule.java:559)
...

RHEL + IBMJDK
javax.security.auth.login.FailedLoginException: Login error: java.net.UnknownHostException: [2620
	at com.ibm.security.jgss.i18n.I18NException.throwFailedLoginException(I18NException.java:29)
	at com.ibm.security.auth.module.Krb5LoginModule.j(Krb5LoginModule.java:128)
...

Comment 3 Petr Kremensky 2014-12-10 07:56:18 UTC
List of tests failing on OpenJDK6 w/ IPv6 due to 'javax.security.auth.login.LoginException: [2620'

org.jboss.as.test.integration.security.loginmodules.negotiation.AdvancedLdapLoginModuleTestCase.test1
org.jboss.as.test.integration.security.loginmodules.negotiation.AdvancedLdapLoginModuleTestCase.test2
org.jboss.as.test.integration.security.loginmodules.negotiation.AdvancedLdapLoginModuleTestCase.test3
org.jboss.as.test.integration.security.loginmodules.negotiation.AdvancedLdapLoginModuleTestCase.test4
org.jboss.as.test.integration.security.picketlink.SAML2AttributeMappingTestCase.testPassUserPrincipalToAttributeManager
org.jboss.as.test.integration.security.picketlink.SAML2KerberosAuthenticationTestCase.testJDukeRoles
org.jboss.as.test.integration.security.picketlink.SAML2KerberosAuthenticationTestCase.testJDukePrincipal
org.jboss.as.test.manualmode.security.realms.KerberosHttpInterfaceTestCase.testForHostAsteriskKeyTab
org.jboss.as.test.manualmode.security.realms.KerberosHttpInterfaceTestCase.testNotSuitableKeyTab
org.jboss.as.test.manualmode.security.realms.KerberosHttpInterfaceTestCase.testWrongPrincipalKeyTab
org.jboss.as.test.manualmode.security.realms.KerberosHttpInterfaceTestCase.testWrongRealmKeyTab
org.jboss.as.test.manualmode.security.realms.KerberosHttpInterfaceTestCase.testDoNotRemoveKerberosRealm
org.jboss.as.test.manualmode.security.realms.KerberosHttpInterfaceTestCase.testRemoveKerberosRealm
org.jboss.as.test.manualmode.security.realms.KerberosHttpInterfaceTestCase.testFallBackInWrong1KerberosRealm
org.jboss.as.test.manualmode.security.realms.KerberosHttpInterfaceTestCase.testFallBackInWrong2KerberosRealm
org.jboss.as.test.manualmode.security.realms.KerberosHttpInterfaceTestCase.testFallBackInWrong3KerberosRealm
org.jboss.as.test.manualmode.security.realms.KerberosHttpInterfaceTestCase.testFallBackInKerberosRealm

See 
https://jenkins.mw.lab.eng.bos.redhat.com/hudson/job/eap-6x-as-testsuite-IPv6-rhel/26/RELEASE=6.4.0,jdk=openjdk1.6_local,label_exp=linux-pure-ipv6/testReport/

Comment 4 Petr Kremensky 2014-12-10 08:06:20 UTC
Please ignore the previous comment.

This BZ covers 
org.jboss.as.test.integration.security.picketlink.SAML2AttributeMappingTestCase.testPassUserPrincipalToAttributeManager
org.jboss.as.test.integration.security.picketlink.SAML2KerberosAuthenticationTestCase.testJDukeRoles
org.jboss.as.test.integration.security.picketlink.SAML2KerberosAuthenticationTestCase.testJDukePrincipal

fails on RHEL 7 w/ OpenJDK6

https://jenkins.mw.lab.eng.bos.redhat.com/hudson/job/eap-6x-as-testsuite-rhel/RELEASE=6.4.0,jdk=openjdk1.6_local,label_exp=eap-sustaining%20&&%20EAP-RHEL7/lastCompletedBuild/testReport/

I'll create a new BZ covering IPv6 failures mentioned in comment 3

Comment 5 Tomas Hofman 2015-01-07 11:47:33 UTC
Fails due to "GSSException: Failure unspecified at GSS-API level (Mechanism level: Checksum failed)".

It seems it's caused by following OpenJDK bug, which is fixed in OpenJDK 7: https://bugs.openjdk.java.net/browse/JDK-7030180