project_key: JBPAPP6 Using Krb5LoginModule from IBM JDK ends with this error: {panel:title=Log file| borderStyle=dashed} 15:06:19,110 ERROR [org.jboss.security.authentication.JBossCachedAuthenticationManager] (http-/127.0.0.1:8080-1) Login failure: javax.security.auth.login.LoginException: unable to find LoginModule class: com.ibm.security.auth.module.Krb5LoginModule at javax.security.auth.login.LoginContext.invoke(LoginContext.java:834) [rt.jar:1.6.0] at javax.security.auth.login.LoginContext.access$000(LoginContext.java:209) [rt.jar:1.6.0] at javax.security.auth.login.LoginContext$4.run(LoginContext.java:709) [rt.jar:1.6.0] at java.security.AccessController.doPrivileged(AccessController.java:251) [vm.jar:] at javax.security.auth.login.LoginContext.invokePriv(LoginContext.java:706) [rt.jar:1.6.0] at javax.security.auth.login.LoginContext.login(LoginContext.java:603) [rt.jar:1.6.0] at org.jboss.security.negotiation.spnego.SPNEGOLoginModule.getServerSubject(SPNEGOLoginModule.java:282) [jboss-negotiation-spnego-2.2.0.SP1.jar:2.2.0.SP1] {panel} Class Krb5LoginModule from Sun/Oracle is covered by a jboss-negotiation module dependency "sun.jdk", but there is no such dependency for IBM Java.
The path exports needed for IBM Kerberos login module are: {panel:borderStyle=dashed} <path name="*com/ibm/security/auth*"/> <path name="*com/ibm/security/auth/module*"/> {panel}
Labels: Added: eap6_need_triage
Link: Added: This issue is a dependency of JBPAPP-9188
Josef, this needs to go into documentation some place. I doubt we can make a product change.
We are adding new module ibm.jdk that will contain all ibm paths the same way as sun.jdk is for sun's jdk.
https://github.com/jbossas/jboss-as/pull/2604 https://github.com/jbossas/jboss-as/pull/2603
Fixed in upstream by adding ibm.jdk module that has ibm jdk specific classpaths imported.
Verified in EAP 6.0.1.ER2
Modifying release note status.
Release Notes Docs Status: Added: Not Yet Documented
Release Notes Text: Added: Updated release note status.
Updated release note status.
Release Notes Text: Removed: Updated release note status.
Reopening. Sande, I'm not sure what was the point behind the reopening and resolving the issue again. Can I close it again? (functionality was verified already)
Josef, did I forget to close it again after setting the release note status? Feel free to close it. It can be opened when the release note text is added.
reopening for release notes updates
Writer: Added: elogue
Writer: Removed: elogue Added: tomwells
Release Notes Docs Status: Removed: Not Yet Documented Added: Documented as Resolved Issue Release Notes Text: Added: A missing jboss-negotiation module dependency prevented the use of Krb5LoginModule with the IBM JDK. A new module, ibm.jdk, has been added that contains all required ibm paths. Krb5LoginModule now works successfully with the IBM JDK.
Release Notes Docs Status: Removed: Documented as Resolved Issue Writer: Removed: tomwells Release Notes Text: Removed: A missing jboss-negotiation module dependency prevented the use of Krb5LoginModule with the IBM JDK. A new module, ibm.jdk, has been added that contains all required ibm paths. Krb5LoginModule now works successfully with the IBM JDK. Docs QE Status: Removed: NEW