IV75493: NULLPOINTEREXCEPTION THROWN WHEN LOGIN WITH LINUXLOGINMODULE AND JAASLOGINMODULE

APAR status

• Closed as program error.

Error description

• Error Message, as reported by customer:
  N/A
  
  Stack Trace, if applicable:
  javax.security.auth.login.LoginException:
  java.lang.NullPointerException
   at
  com.ibm.security.auth.module.LinuxLoginModule.login(LinuxLoginMo
  dule.java:160)
   at sun.reflect.NativeMethodAccessorImpl.invoke0(Native
  Method)
   at
  sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessor
  Impl.java:95)
   at
  sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethod
  AccessorImpl.java:55)
   at java.lang.reflect.Method.invoke(Method.java:507)
   at
  javax.security.auth.login.LoginContext.invoke(LoginContext.java:
  788)
   at
  javax.security.auth.login.LoginContext.access$000(LoginContext.j
  ava:196)
   at
  javax.security.auth.login.LoginContext$5.run(LoginContext.java:7
  21)
   at
  javax.security.auth.login.LoginContext$5.run(LoginContext.java:7
  19)
   at
  java.security.AccessController.doPrivileged(AccessController.jav
  a:595)
   at
  javax.security.auth.login.LoginContext.invokeCreatorPriv(LoginCo
  ntext.java:719)
   at
  javax.security.auth.login.LoginContext.login(LoginContext.java:5
  93)
  
  
  Other Error Information, as reported by customer:
  The problem only happens on RHEL 7.1 with PPC64LE version of
  Java.
  

Local fix

• N/A
  

Problem summary

• Unexpected NullPointerException thrown when performing JAAS
  login
  
  ERROR DESCRIPTION:
  When LinuxLoginModule or JAASLoginModule are used to perform
  JAAS login on Linux or AIX, NullPointerException might be thrown
  when the corresponding user group is null.
  

Problem conclusion

• A fix is made to JAAS component to handle null user group.
  The associated Hursley RTC Problem Report is 97294
  JVMs affected: Java 6.0, Java 626, Java 7.0, Java 727 and Java 8
  The fix was delivered for Java 6.0 SR16FP15, Java 626 SR8FP15,
  Java 7.0 SR9FP20, Java 727 SR3FP20 and Java 8 SR2
  The affected jar is "rt.jar".
  The build level of this jar for the affected releases is
  "20150730_01"
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  TIV JAVA GSS-AP

• Fixed component ID

  TIVSECJGS

Applicable component levels

• R100 PSY

     UP