[
https://issues.apache.org/jira/browse/KARAF-6823?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17349811#comment-17349811
]
Vassil Zorev edited comment on KARAF-6823 at 5/22/21, 6:42 PM:
---------------------------------------------------------------
I cannot find the relevant JDK issue yet, but the issue is likely the following:
In Jdk 11.0.8 com.sun.jndi.ldap.LdapCtxFactory#getUsingURL
{{try {}}
\{{ return
AccessController.doPrivileged((PrivilegedExceptionAction<DirContext>) () -> {}}
\{{ try {}}
\{{ return getContextFromEndpoints(url, env);}}
\{{ } catch (Exception e) {}}{{...}}
the subject information is lost.
While in Jdk 11.0.11 com.sun.jndi.ldap.LdapCtxFactory#getUsingURL
{{try {}}
\{{ return
AccessController.doPrivilegedWithCombiner((PrivilegedExceptionAction<DirContext>)
() -> {}}
\{{ try {}}
\{{ return getContextFromEndpoints(url, env);}}
\{{ } catch (Exception e) {}}{{...}}
it is preserved by this withCombiner call.
Edit: these tests were with Oracle JDK 11.0.8 and 11.0.11
was (Author: vassilz):
I cannot find the relevant JDK issue yet, but the issue is likely the following:
In Jdk 11.0.8 com.sun.jndi.ldap.LdapCtxFactory#getUsingURL
{{try {}}
{{ return AccessController.doPrivileged((PrivilegedExceptionAction<DirContext>)
() -> {}}
{{ try {}}
{{ return getContextFromEndpoints(url, env);}}
{{ } catch (Exception e) {}}{{...}}
the subject information is lost.
While in Jdk 11.0.11 com.sun.jndi.ldap.LdapCtxFactory#getUsingURL
{{try {}}
{{ return
AccessController.doPrivilegedWithCombiner((PrivilegedExceptionAction<DirContext>)
() -> {}}
{{ try {}}
{{ return getContextFromEndpoints(url, env);}}
{{ } catch (Exception e) {}}{{...}}
it is preserved by this withCombiner call.
> GSSAPILdapLoginModuleTest is failing with JDK 11.0.8
> ----------------------------------------------------
>
> Key: KARAF-6823
> URL: https://issues.apache.org/jira/browse/KARAF-6823
> Project: Karaf
> Issue Type: Bug
> Components: karaf
> Reporter: Jean-Baptiste Onofré
> Priority: Major
>
> The GSSAPILdapLoginModuleTest in jaas/module is failing with JDK 11.0.8 (it
> works with previous JDK version):
> {code:java}
> GSSException: No valid credentials provided (Mechanism level: Failed to find
> any Kerberos tgt) {code}
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
