IJ57119: KERBEROS FAILS WITH UNSATISFIEDLINKERROR DURING SYSTEM.LOADLIBRARY FOR NATIVECREDS ON NON-WINDOWS PLATFORMS.

APAR status

• Closed as program error.

Error description

• Error Message: Kerberos login fails
  .
  Stack Trace: Caused by: java.lang.UnsatisfiedLinkError:
  NativeCreds (Not
   found in com.ibm.oti.vm.bootstrap.library.path)
  at
  
  java.lang.ClassLoader.loadLibraryWithPath(ClassLoader.java:1463)
   at
  
  java.lang.ClassLoader.loadLibraryWithClassLoader(ClassLoader.jav
  a:1409)
   at java.lang.System.loadLibrary(System.java:617)
  at
   com.ibm.security.krb5.c.a(c.java:3) at
   com.ibm.security.krb5.c.run(c.java:2) at
  
  java.security.AccessController.doPrivileged(AccessController.jav
  a:749)
   at
  
  com.ibm.security.krb5.Credentials.ensureLoaded(Credentials.java:
  347)
   at
  
  com.ibm.security.krb5.Credentials.acquireDefaultCreds(Credential
  s.java:120)
   at
  
  com.ibm.security.auth.module.Krb5LoginModule.k(Krb5LoginModule.j
  ava:1011)
   at
  
  com.ibm.security.auth.module.Krb5LoginModule.b(Krb5LoginModule.j
  ava:219)
   at
  
  com.ibm.security.auth.module.Krb5LoginModule.login(Krb5LoginModu
  le.java:452)
  .
  

Local fix

• N/A
  

Problem summary

• Kerberos running on Non-Windows platforms incorrectly attempts
  to
   obtain login credentials from the native system by
  loading the
   NativeCreds shared library.
  

Problem conclusion

• Kerberos has been updated to only attempt loading the
  NativeCreds
   shared library on Windows platforms.
   A fix is made to IBMJGSS/ibmjgssprovider.jar
   The associated Hursley RTC Problem Report is 153490
   The associated Austin git issue IBMJGSS#144
   JVMs affected: Java 8
   The fix was delivered for Java 8SR8FP65 The affected
  jar is "ibmjgssprovider.jar".
   The build level of this jar for the affected
  releases is "20260114-588"
  
  .
  This APAR will be fixed in the following Releases:
  .
  IBM Semeru Runtimes
  IBM SDK, Java Technology Edition
   8 SR8 FP65 (8.0.8.65)
  .
  Downloads and supplementary documentation can be found at the
  following locations:
  - For non z/OS operating systems:
   - IBM Semeru Runtimes, Version 11 and later
   https://www.ibm.com/semeru-runtimes/downloads/
   - IBM SDK, Java Technology Edition, Version 8
   https://www.ibm.com/support/pages/java-sdk-downloads/
  - For the z/OS operating system:
   - Java SDK Products on z/OS
   https://www.ibm.com/support/pages/java-sdk-products-zos
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  SECURITY

• Fixed component ID

  620700125

Applicable component levels