IV75769: NULLPOINTEREXCEPTION THROWN WHEN LOGIN WITH LINUXLOGINMODULE AND JAASLOGINMODULE

APAR status

• Closed as program error.

Error description

• Error Message: N/A
  .
  Stack Trace: javax.security.auth.login.LoginException:
  java.lang.NullPointerException
   at
  com.ibm.security.auth.module.LinuxLoginModule.login(LinuxLoginMo
  dule.java:160)
   at sun.reflect.NativeMethodAccessorImpl.invoke0(Native
  Method)
   at
  sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessor
  Impl.java:95)
   at
  sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethod
  AccessorImpl.java:55)
   at java.lang.reflect.Method.invoke(Method.java:507)
   at
  javax.security.auth.login.LoginContext.invoke(LoginContext.java:
  788)
   at
  javax.security.auth.login.LoginContext.access$000(LoginContext.j
  ava:196)
   at
  javax.security.auth.login.LoginContext$5.run(LoginContext.java:7
  21)
   at
  javax.security.auth.login.LoginContext$5.run(LoginContext.java:7
  19)
   at
  java.security.AccessController.doPrivileged(AccessController.jav
  a:595)
   at
  javax.security.auth.login.LoginContext.invokeCreatorPriv(LoginCo
  ntext.java:719)
   at
  javax.security.auth.login.LoginContext.login(LoginContext.java:5
  93)
  .
  The problem only happens on RHEL 7.1 with PPC64LE version of
  Java.
  

Local fix

• N/A
  

Problem summary

• Unexpected NullPointerException thrown when performing JAAS
  login
  

Problem conclusion

• A fix is made to JAAS component to handle null user group.
  The associated Hursley RTC Problem Report is 97294
  JVMs affected: Java 6.0, Java 626, Java 7.0, Java 727 and Java 8
  The fix was delivered for Java 6.0 SR16FP15, Java 626 SR8FP15,
  Java 7.0 SR9FP20, Java 727 SR3FP20 and Java 8 SR2
  The affected jar is "rt.jar".
  The build level of this jar for the affected releases is
  "20150730_01"
  .
  This APAR will be fixed in the following Java Releases:
   8 SR2 (8.0.2.0)
   7 R1 SR3 FP20 (7.1.3.20)
   7 SR9 FP20 (7.0.9.20)
   6 R1 SR8 FP15 (6.1.8.15)
   6 SR16 FP15 (6.0.16.15)
  .
  Contact your IBM Product's Service Team for these Service
  Refreshes and Fix Packs.
  For those running stand-alone, information about the available
  Service Refreshes and Fix Packs can be found at:
   https://www.ibm.com/developerworks/java/jdk/
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

• Fixed component name

  SECURITY

• Fixed component ID

  620700125

Applicable component levels

• R270 PSY

     UP

• R260 PSY

     UP

• R600 PSY

     UP