[jboss-jira] [JBoss JIRA] (ELY-1541) local-kerberos CredentialSource does not work with IBM java

[Jan Kalina (JIRA)]

    [ https://issues.jboss.org/browse/ELY-1541?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13546559#comment-13546559 ] 

Jan Kalina commented on ELY-1541:
---------------------------------

It looks *useDefaultCcache* is not sufficient on Fedora with IBM JDK defaults.
It works if I set path to the ccache manually by klist output:
{code:java}
options.put("useCcache", "FILE:/tmp/krb5cc_1000");
{code}

> local-kerberos CredentialSource does not work with IBM java
> -----------------------------------------------------------
>
>                 Key: ELY-1541
>                 URL: https://issues.jboss.org/browse/ELY-1541
>             Project: WildFly Elytron
>          Issue Type: Bug
>          Components: Credentials
>    Affects Versions: 1.2.3.Final
>            Reporter: Jan Kalina
>            Assignee: Jan Kalina
>              Labels: ibm-java
>
> Why trying to connect as with Oracle JDK, following error follows:
> {code}
> Failed to connect to the controller: Unable to authenticate against controller at localhost:9990: ELY05053: Callback handler failed for unknown reason: java.lang.reflect.UndeclaredThrowableException: org.ietf.jgss.GSSException, major code: 11, minor code: 0
> 	major string: General failure, unspecified at GSSAPI level
> 	minor string: Cannot get credential for principal default principal
> {code}
> This is probably related to missing *useDefaultCcache* JAAS config (false by default):
> https://www.ibm.com/support/knowledgecenter/en/SSYKE2_6.0.0/com.ibm.java.security.component.60.doc/security-component/jgssDocs/jaas_login_user.html



--
This message was sent by Atlassian JIRA
(v7.5.0#75005)