Bug 900640 (JBPAPP6-932)
| Summary: | Unable to use Krb5LoginModule from IBM JDK, because of missing jboss-negotiation module dependency | ||
|---|---|---|---|
| Product: | [JBoss] JBoss Enterprise Application Platform 6 | Reporter: | Josef Cacek <jcacek> |
| Component: | Security | Assignee: | Tomaz Cerar <tomaz.cerar> |
| Status: | CLOSED NEXTRELEASE | QA Contact: | |
| Severity: | high | Docs Contact: | |
| Priority: | high | ||
| Version: | 6.0.0 | CC: | anil.saldhana, jcacek, sgilda, tomaz.cerar |
| Target Milestone: | --- | ||
| Target Release: | EAP 6.0.1 | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| URL: | http://jira.jboss.org/jira/browse/JBPAPP6-932 | ||
| Whiteboard: | eap6_need_triage | ||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2012-10-19 03:53:58 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | |||
| Bug Blocks: | 900553 | ||
The path exports needed for IBM Kerberos login module are:
{panel:borderStyle=dashed}
<path name="*com/ibm/security/auth*"/>
<path name="*com/ibm/security/auth/module*"/>
{panel}
Labels: Added: eap6_need_triage Link: Added: This issue is a dependency of JBPAPP-9188 Josef, this needs to go into documentation some place. I doubt we can make a product change. We are adding new module ibm.jdk that will contain all ibm paths the same way as sun.jdk is for sun's jdk. Fixed in upstream by adding ibm.jdk module that has ibm jdk specific classpaths imported. Verified in EAP 6.0.1.ER2 Modifying release note status. Release Notes Docs Status: Added: Not Yet Documented Release Notes Text: Added: Updated release note status. Updated release note status. Release Notes Text: Removed: Updated release note status. Reopening. Sande, I'm not sure what was the point behind the reopening and resolving the issue again. Can I close it again? (functionality was verified already) Josef, did I forget to close it again after setting the release note status? Feel free to close it. It can be opened when the release note text is added. reopening for release notes updates Writer: Added: elogue Writer: Removed: elogue Added: tomwells Release Notes Docs Status: Removed: Not Yet Documented Added: Documented as Resolved Issue Release Notes Text: Added: A missing jboss-negotiation module dependency prevented the use of Krb5LoginModule with the IBM JDK. A new module, ibm.jdk, has been added that contains all required ibm paths. Krb5LoginModule now works successfully with the IBM JDK. Release Notes Docs Status: Removed: Documented as Resolved Issue Writer: Removed: tomwells Release Notes Text: Removed: A missing jboss-negotiation module dependency prevented the use of Krb5LoginModule with the IBM JDK. A new module, ibm.jdk, has been added that contains all required ibm paths. Krb5LoginModule now works successfully with the IBM JDK. Docs QE Status: Removed: NEW |
project_key: JBPAPP6 Using Krb5LoginModule from IBM JDK ends with this error: {panel:title=Log file| borderStyle=dashed} 15:06:19,110 ERROR [org.jboss.security.authentication.JBossCachedAuthenticationManager] (http-/127.0.0.1:8080-1) Login failure: javax.security.auth.login.LoginException: unable to find LoginModule class: com.ibm.security.auth.module.Krb5LoginModule at javax.security.auth.login.LoginContext.invoke(LoginContext.java:834) [rt.jar:1.6.0] at javax.security.auth.login.LoginContext.access$000(LoginContext.java:209) [rt.jar:1.6.0] at javax.security.auth.login.LoginContext$4.run(LoginContext.java:709) [rt.jar:1.6.0] at java.security.AccessController.doPrivileged(AccessController.java:251) [vm.jar:] at javax.security.auth.login.LoginContext.invokePriv(LoginContext.java:706) [rt.jar:1.6.0] at javax.security.auth.login.LoginContext.login(LoginContext.java:603) [rt.jar:1.6.0] at org.jboss.security.negotiation.spnego.SPNEGOLoginModule.getServerSubject(SPNEGOLoginModule.java:282) [jboss-negotiation-spnego-2.2.0.SP1.jar:2.2.0.SP1] {panel} Class Krb5LoginModule from Sun/Oracle is covered by a jboss-negotiation module dependency "sun.jdk", but there is no such dependency for IBM Java.