IJ34968: SPNEGO CLIENT VERIFICATION OF REQUESTED MESSAGE CONFIDENTIALITY FAILS AFTER CALL TO SPNEGOCONTEXT.CONTEXT.WRAP().

APAR status

• Closed as program error.

Error description

• Error Message: N/A
  .
  Stack Trace: Java callstack:
  java.lang.Exception: unexpected privacy status
  at krb5.auto.Context$5.run(Context.java:483)
  at krb5.auto.Context$4.run(Context.java:356)
  at krb5.auto.Context$4.run(Context.java:1)
  at
  java.security.AccessController.doPrivileged(AccessController.jav
  a:774)
  at javax.security.auth.Subject.doAs(Subject.java:570)
  at krb5.auto.Context.doAs(Context.java:352)
  at krb5.auto.Context.wrap(Context.java:468)
  at krb5.auto.Context.transmit(Context.java:575)
  at krb5.auto.SPNEGOTest.test(SPNEGOTest.java:99)
  .
  

Local fix

• N/A
  

Problem summary

• The issue was due to a failure in the
  SPNEGOContext.requestConf(), and SPNEGOContext.requestInteg()
  methods.  The
  associated set and clear operations on the
  SPNEGOContext.reqFlagState values did not take into
  consideration the
  fact that the "integrity" option is a corequisite of the
  "confidentiality" option.
  

Problem conclusion

• Modified the associated SPNEGOContext.reqFlagState set and clear
  operations in the SPNEGOContext.requestConf(),
  and SPNEGOContext.requestInteg() methods to allow for the
  corequisite relationship between the "confidentiality"
  and "integrity" options.
  The files affected by this APAR are: ibmjgssprovider.jar (Java 7
  & 7.1: build_20210818--116, Java 8: build_20210818--115).
  The associated Hursley RTC Problem Report is: PR146130.
  The associated Austin Git issue is: Issue #32 for IBMJGSS.
  The associated Austin APAR issue is: N/A.
  The fix was delivered for:  Java 7.0 SR10 FP95, Java 7.1 SR4
  FP95, & Java 8.0 SR6 FP40.
  .
  This APAR will be fixed in the following Java Releases:
     8    SR7       (8.0.7.0)
     7    SR11      (7.0.11.0)
     7 R1 SR5       (7.1.5.0)
  .
  Contact your IBM Product's Service Team for these Service
  Refreshes and Fix Packs.
  For those running stand-alone, information about the available
  Service Refreshes and Fix Packs can be found at:
             https://www.ibm.com/developerworks/java/jdk/
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  SECURITY

• Fixed component ID

  620700125

Applicable component levels