Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-6294819

with NativeGSS provider, createCredential() will throw exception

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Cannot Reproduce
    • Icon: P3 P3
    • None
    • 6
    • security-libs
    • None

      ith NativeGSS provider, on server side, when server acquire credential, then estabilish context with client,
      calling createCredential() always throw exception error. Please see:
      -----------------------------
      Caused by: GSSException: Failure unspecified at GSS-API level (Mechanism level: Permission denied)
              at sun.security.jgss.wrapper.GSSLibStub.acquireCred(Native Method)
              at sun.security.jgss.wrapper.GSSCredElement.<init>(GSSCredElement.java:48)
              at sun.security.jgss.wrapper.NativeGSSFactory.getCredentialElement(NativeGSSFactory.java:63)
              at sun.security.jgss.GSSManagerImpl.getCredentialElement(GSSManagerImpl.java:154)
              at sun.security.jgss.GSSCredentialImpl.add(GSSCredentialImpl.java:406)
              at sun.security.jgss.GSSCredentialImpl.<init>(GSSCredentialImpl.java:56)
              at sun.security.jgss.GSSManagerImpl.createCredential(GSSManagerImpl.java:102)
              at SampleServer.main(SampleServer.java:116)
      --------------------------------
      My code is :

      ----------------------
                  GSSName serverName = manager.createName("sampleServer", krb5PrincipalNameType);
                  GSSCredential mycred = manager.createCredential(serverName,
                                              GSSCredential.INDEFINITE_LIFETIME,
                                              krb5Mech,
                                              GSSCredential.ACCEPT_ONLY);

      or inputting "null" to GSSName

                  GSSCredential mycred = manager.createCredential(null,
                                              GSSCredential.INDEFINITE_LIFETIME,
                                              krb5Mech,
                                              GSSCredential.ACCEPT_ONLY);
      ------------------------

      I got the same error when using above two ways.
      This error occur with SQE NativeGSS test suites, and in order to narrow down the problem,
      and reproduce it easily, I attached a simple test.
      It's from jgss tutorial. Please get it from bugster.
      Run test code on lunarorbit.sfbay.
      #sh ss ( on server side)
      #sh cc ( on client side, on another terminal).
      ###@###.### 2005-07-08 05:00:36 GMT

            valeriep Valerie Peng
            jgaosunw Judy Gao (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

              Created:
              Updated:
              Resolved:
              Imported:
              Indexed: