PH42887: KERBEROS ERROR MESSAGE AFTER UPGRADING TO 8.5.5.20 AND 9.0.5.8

APAR status

• Closed as program error.

Error description

• After the fixpack upgrade, the log shows Kerberos related error
  messages.
  
  
  --------------- Sample Error message
  
  [10/7/21 23:01:04:216 EDT] 00003504 SystemOut O 23:01:04,216
  ERROR [WorkManager.sdaWorkManager : 10926] KrbAuthenticator:74 -
  Error occurred: java.lang.ArrayIndexOutOfBoundsException: Array
  index out of range: 0
  at com.ibm.ws.security.auth.kerberos.Krb5LoginModuleWrapperClie
  nt.logout(Krb5LoginModuleWrapperClient.java:602)
  at sun.reflect.GeneratedMethodAccessor75.invoke(Unknown Source)
  at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMe
  thodAccessorImpl.java:55)
  at java.lang.reflect.Method.invoke(Method.java:508)
  at javax.security.auth.login.LoginContext.invoke(LoginContext.j
  ava:788)
  -----------------------------
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM WebSphere Application      *
  *                  Server                                      *
  *                  who enabled SPNEGO or Kerberos              *
  *                  authentication                              *
  ****************************************************************
  * PROBLEM DESCRIPTION: ArrayIndexOutOfBoundsException is       *
  *                      thrown                                  *
  *                      after upgrading to 8.5.5.20 or 9.0.5.8  *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  At the time of user logout, an empty array may be
  accessed and cause ArrayIndexOutOfBoundsException.
  

Problem conclusion

• The code issue has been fixed.
  
  The fix for this APAR is targeted for inclusion in fix pack
  8.5.5.22 and 9.0.5.12.
  For more information, see 'Recommended Updates for WebSphere
  Application Server': https://www.ibm.com/support/pages/node/7155
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WEBS APP SERV N

• Fixed component ID

  5724H8800

Applicable component levels