IV81741: REQUESTREPLAYDET() DOES NOT WORK AS EXPECTED IN JAVA 8 FOR WAS

APAR status

• Closed as program error.

Error description

• Error Message: When calling requestReplayDet(false), WAS expects
  there will be no replay check but the replay check is still
  performed.
  .
  Stack Trace: org.ietf.jgss.GSSException, major code: 11, minor
  code: 0
  major string: General failure, unspecified at GSSAPI level
  minor string: Error: java.lang.Exception: Error:
  org.ietf.jgss.GSSException, major code: 11, minor code: 34
  major string: General failure, unspecified at GSSAPI level
  minor string: Kerberos error while decoding and verifying token:
  com.ibm.security.krb5.internal.KrbException, status code: 34
  message: Request is a replay
  at
  com.ibm.security.jgss.i18n.I18NException.throwGSSException(I18NE
  xception.java:17)
  at com.ibm.security.jgss.mech.krb5.g.b(g.java:205)
  at
  com.ibm.security.jgss.mech.krb5.g.acceptSecContext(g.java:1339)
  at
  com.ibm.security.jgss.GSSContextImpl.acceptSecContext(GSSContext
  Impl.java:455)
  at
  com.ibm.security.jgss.GSSContextImpl.acceptSecContext(GSSContext
  Impl.java:55)
  .
  

Local fix

Problem summary

• Problem is how value in requestReplayDet() processed
  

Problem conclusion

• The issue is resolved to fulfill WAS requirement
  The associated RTC PR is 108111
  The associated Austin CMVC defect is 117173
  JVMs affected : Java 8.0
  The fix was delivered for Java 8.0 SR3
  The affected jar is "ibmjgssprovider.jar".
  The build level of this jar for the affected releases is
  "20160220"
  .
  This APAR will be fixed in the following Java Releases:
   8 SR3 (8.0.3.0)
  .
  Contact your IBM Product's Service Team for these Service
  Refreshes and Fix Packs.
  For those running stand-alone, information about the available
  Service Refreshes and Fix Packs can be found at:
   https://www.ibm.com/developerworks/java/jdk/
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

• Fixed component name

  SECURITY

• Fixed component ID

  620700125

Applicable component levels

• R270 PSY

     UP