[jboss-jira] [JBoss JIRA] (ELY-283) Investigate Elytron and gssproxy interoperability

[Jan Kalina (JIRA)]

    [ https://issues.jboss.org/browse/ELY-283?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13507250#comment-13507250 ] 

Jan Kalina commented on ELY-283:
--------------------------------

[~dmlloyd] By traces the crash occurs in GSSLibStub.c during call acceptSecContext:
{code}
  major =
    (*ftab->acceptSecContext)(&minor, &contextHdl, credHdl,
                           &inToken, cb, &srcName, &aMech, &outToken,
                           &aFlags, &aTime, &delCred);
{code}
(to be sure I have placed TRACE directly before and after - yet before deleteGSSCB/resetGSSBuffer - the crash occures directly in acceptSecContext)
{code}
21:08:34,181 INFO  [stdout] (management I/O-2) Debug is  true storeKey true useTicketCache false useKeyTab true doNotPrompt false ticketCache is null isInitiator false KeyTab is /home/jkalina/work/tutorial-kerberos/kerberos-using-apacheds/remote.keytab refreshKrb5Config is false principal is remote/localhost at JBOSS.ORG tryFirstPass is false useFirstPass is false storePass is false clearPass is false
21:08:34,185 INFO  [stdout] (management I/O-2) principal is remote/localhost at JBOSS.ORG
21:08:34,186 INFO  [stdout] (management I/O-2) Will use keytab
21:08:34,186 INFO  [stdout] (management I/O-2) Commit Succeeded 
21:08:34,186 INFO  [stdout] (management I/O-2) 
21:08:34,191 INFO  [stdout] (management I/O-2) SunNativeGSS: Created GSSLibStub for mech 1.2.840.113554.1.2.2
[GSSLibStub_importName]
[GSSLibStub_importName] 139984261540048
[GSSLibStub_displayName] 139984261540048
21:08:34,194 INFO  [stdout] (management I/O-2) SunNativeGSS: Imported remote/localhost at JBOSS.ORG w/ type 1.2.840.113554.1.2.1.1
21:08:34,207 INFO  [stdout] (management I/O-2) Search Subject for Kerberos V5 ACCEPT cred (remote/localhost at JBOSS.ORG, sun.security.jgss.wrapper.GSSCredElement)
[GSSLibStub_acquireCred]
[GSSLibStub_acquireCred] pName=139984261540048, usage=2
[GSSLibStub_acquireCred] [!JK1!] major=0 minor=0
[GSSLibStub_acquireCred] pCred=139984261571568
[GSSLibStub_acquireCred] [!JK2!] major=0 minor=0
21:08:34,244 INFO  [stdout] (management task-1) SunNativeGSS: Precomputed mechToken length: 500
21:08:34,245 INFO  [stdout] (management task-1) SunNativeGSS: Complete Token length: 515
21:08:34,245 INFO  [stdout] (management task-1) SunNativeGSS: acceptSecContext=> inToken len=515
[GSSLibStub_acceptContext]
[GSSLibStub_acceptContext] before2: pCred=139984261571568, pContext=0
#
# A fatal error has been detected by the Java Runtime Environment:
#
#  SIGSEGV (0xb) at pc=0x00007f51050212b2, pid=12158, tid=12329
#
# JRE version: OpenJDK Runtime Environment (9.0) (build 9-internal+0-adhoc.jkalina.9dev)
# Java VM: OpenJDK 64-Bit Server VM (9-internal+0-adhoc.jkalina.9dev, mixed mode, tiered, compressed oops, g1 gc, linux-amd64)
# Problematic frame:
# C  [libc.so.6+0x932b2]  cfree+0x32
#
# Core dump will be written. Default location: Core dumps may be processed with "/usr/lib/systemd/systemd-coredump %P %u %g %s %t %c %e" (or dumping to /home/jkalina/work/tutorial-kerberos/wildfly-11.0.0.Final-SNAPSHOT/core.12158)
#
# An error report file with more information is saved as:
# /home/jkalina/work/tutorial-kerberos/wildfly-11.0.0.Final-SNAPSHOT/hs_err_pid12158.log
#
# If you would like to submit a bug report, please visit:
#   http://bugreport.java.com/bugreport/crash.jsp
# The crash happened outside the Java Virtual Machine in native code.
# See problematic frame for where to report the bug.
#
bin/standalone.sh: line 311: 12158 Aborted                 (core dumped) "java" -D"[Standalone]" -server -Djavax.security.auth.useSubjectCredsOnly=false -Dsun.security.jgss.lib=/usr/lib64/libgssapi_krb5.so.2.2 -Dsun.security.jgss.native=true -Dsun.security.nativegss.debug=true -Dsun.security.krb5.debug=true -Dsun.security.jgss.debug=true -agentlib:jdwp=transport=dt_socket,address=8787,server=y,suspend=n "-Dorg.jboss.boot.log.file=/home/jkalina/work/tutorial-kerberos/wildfly-11.0.0.Final-SNAPSHOT/standalone/log/server.log" "-Dlogging.configuration=file:/home/jkalina/work/tutorial-kerberos/wildfly-11.0.0.Final-SNAPSHOT/standalone/configuration/logging.properties" -jar "/home/jkalina/work/tutorial-kerberos/wildfly-11.0.0.Final-SNAPSHOT/jboss-modules.jar" -mp "/home/jkalina/work/tutorial-kerberos/wildfly-11.0.0.Final-SNAPSHOT/modules" org.jboss.as.standalone -Djboss.home.dir="/home/jkalina/work/tutorial-kerberos/wildfly-11.0.0.Final-SNAPSHOT" -Djboss.server.base.dir="/home/jkalina/work/tutorial-kerberos/wildfly-11.0.0.Final-SNAPSHOT/standalone"
{code}

> Investigate Elytron and gssproxy interoperability
> -------------------------------------------------
>
>                 Key: ELY-283
>                 URL: https://issues.jboss.org/browse/ELY-283
>             Project: WildFly Elytron
>          Issue Type: Task
>          Components: SASL
>            Reporter: Peter Skopek
>            Assignee: Jan Kalina
>             Fix For: 2.0.0.Alpha1
>
>         Attachments: openjdk-patch-native-mechs.patch
>
>
> Investigate Elytron and gssproxy interoperability.
> https://fedorahosted.org/gss-proxy/



--
This message was sent by Atlassian JIRA
(v7.5.0#75005)