IV71562: JGSS CANNOT GET KDC FROM DNS

APAR status

• Closed as program error.

Error description

• Error Message: The test failed to retrieve KDC information from
  DNS. dns_lookup_dns and dns_lookup_realm have been set in
  krb5.ini.
  .
  Stack Trace: <OSB>KRB_DBG_CFG<CSB> Config:main: getKDCFromDNS:
  Cannot locate DNS SRV record.<OSB>KRB_DBG_CFG<CSB> Config:main:
   getKDCList: Cannot locate KDC.Exception in thread "main"
  java.lang.reflect.InvocationTargetExceptionat
  sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)at
  sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessor
  Impl.java:94)at
  sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethod
  AccessorImpl.java:55)at
  java.lang.reflect.Method.invoke(Method.java:619)at
  org.eclipse.jdt.internal.jarinjarloader.JarRsrcLoader.main(JarRs
  rcLoader.java:58)Caused by:
  javax.security.auth.login.FailedLoginException: Login error:
  com.ibm.security.krb5.KrbException, status code: 0message:
  Cannot find KDC for realm <REALM>at
  com.ibm.security.jgss.i18n.I18NException.throwFailedLoginExcepti
  on(I18NException.java:181)at
  com.ibm.security.auth.module.Krb5LoginModule.kerberosLogin(Krb5L
  oginModule.java:1850)at
  com.ibm.security.auth.module.Krb5LoginModule.doLogin(Krb5LoginMo
  dule.java:477)at
  com.ibm.security.auth.module.Krb5LoginModule.login(Krb5LoginModu
  le.java:316)at
  sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)at
  sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessor
  Impl.java:94)at
  sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethod
  AccessorImpl.java:55)at
  java.lang.reflect.Method.invoke(Method.java:619)
  .
  

Local fix

Problem summary

• The problem was caused by a coding error in protocol name.
  

Problem conclusion

• Fixed protocol name error.The corresponding Austin defect is
  116488.The corresponding RTC Problem Report is 88078.Platform
  affected: All platforms.JVMs affected: 7.0, 7.27, 8.0.Jars
  affected: ibmjgssprovider.jar.The fix will be available in
  170_SR9, 727_SR3, 180_SR1.Build level is 20150325.
  .
  This APAR will be fixed in the following Java Releases:
   7 SR9 (7.0.9.0)
   7 R1 SR3 (7.1.3.0)
   8 SR1 (8.0.1.0)
  .
  Contact your IBM Product's Service Team for these Service
  Refreshes and Fix Packs.
  For those running stand-alone, information about the Service
  Refreshes and Fix Packs can be found at:
   https://www.ibm.com/developerworks/java/jdk/
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  IV71564

• Fixed component name

  SECURITY

• Fixed component ID

  620700125

Applicable component levels

• R260 PSY

     UP

• R270 PSY

     UP