Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-6318529

Kerberos encryption types supports does not work properly in JGSS implementation.

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: P3 P3
    • 6
    • 6
    • security-libs
    • None
    • beta
    • generic
    • generic
    • Verified

      Nightly running results show that except des-cbc-md5, all other encryption types fails using the most recent jdk build. These result can be divided into three categories:
      1. des-cbc-md5
      This test succeeded without any failure.
      2. des3-cbc-sha1, aes128-cts, rc4-hmac, des-cbc-crc
      These four tests failed with the following exceptions:
      Exception in thread "main" javax.security.auth.login.LoginException: Encryption
      type NULL is not supported/enabled
              at com.sun.security.auth.module.Krb5LoginModule.attemptAuthentication(Kr
      b5LoginModule.java:658)
              at com.sun.security.auth.module.Krb5LoginModule.login(Krb5LoginModule.ja
      va:512)
              at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
              at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.
      java:39)
              at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAcces
      sorImpl.java:25)
              at java.lang.reflect.Method.invoke(Method.java:585)
              at javax.security.auth.login.LoginContext.invoke(LoginContext.java:769)
              at javax.security.auth.login.LoginContext.access$000(LoginContext.java:1
      86)
              at javax.security.auth.login.LoginContext$4.run(LoginContext.java:683)
              at java.security.AccessController.doPrivileged(Native Method)
              at javax.security.auth.login.LoginContext.invokePriv(LoginContext.java:6
      80)
              at javax.security.auth.login.LoginContext.login(LoginContext.java:579)
              at BackendServer.main(BackendServer.java:186)
      Caused by: KrbException: Encryption type NULL is not supported/enabled
              at sun.security.krb5.EncryptionKey.findKey(EncryptionKey.java:466)
              at sun.security.krb5.KrbAsReq.init(KrbAsReq.java:380)
              at sun.security.krb5.KrbAsReq.<init>(KrbAsReq.java:299)
              at sun.security.krb5.KrbAsReq.<init>(KrbAsReq.java:100)
              at sun.security.krb5.Credentials.sendASRequest(Credentials.java:417)
              at sun.security.krb5.Credentials.acquireTGT(Credentials.java:397)
              at com.sun.security.auth.module.Krb5LoginModule.attemptAuthentication(Kr
      b5LoginModule.java:629)
              ... 12 more
      3. aes256-cts
      This test failed with the following exceptions.
      Exception in thread "main" javax.security.auth.login.LoginException: No supporte
      d encryption types listed in default_tkt_enctypes
              at com.sun.security.auth.module.Krb5LoginModule.attemptAuthentication(Kr
      b5LoginModule.java:658)
              at com.sun.security.auth.module.Krb5LoginModule.login(Krb5LoginModule.ja
      va:512)
              at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
              at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.
      java:39)
              at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAcces
      sorImpl.java:25)
              at java.lang.reflect.Method.invoke(Method.java:585)
              at javax.security.auth.login.LoginContext.invoke(LoginContext.java:769)
              at javax.security.auth.login.LoginContext.access$000(LoginContext.java:1
      86)
              at javax.security.auth.login.LoginContext$4.run(LoginContext.java:683)
              at java.security.AccessController.doPrivileged(Native Method)
              at javax.security.auth.login.LoginContext.invokePriv(LoginContext.java:6
      80)
              at javax.security.auth.login.LoginContext.login(LoginContext.java:579)
              at BackendServer.main(BackendServer.java:186)
      Caused by: KrbException: No supported encryption types listed in default_tkt_enc
      types
              at sun.security.krb5.internal.crypto.EType.getDefaults(EType.java:221)
              at sun.security.krb5.KrbAsReq.init(KrbAsReq.java:384)
              at sun.security.krb5.KrbAsReq.<init>(KrbAsReq.java:299)
              at sun.security.krb5.KrbAsReq.<init>(KrbAsReq.java:80)
              at sun.security.krb5.Credentials.sendASRequest(Credentials.java:415)
              at sun.security.krb5.Credentials.acquireTGT(Credentials.java:377)
              at com.sun.security.auth.module.Krb5LoginModule.attemptAuthentication(Kr
      b5LoginModule.java:629)
              ... 12 more

      The configuration files of these tests are of the following formats(xxxx stands for one specific encryption type):
      [libdefaults]
              default_realm = AMD-01.SFBAY.SUN.COM
              default_tgs_enctypes = xxxx
              default_tkt_enctypes = xxxx
              permitted_enctypes = xxxx
              forwardable = true
      [realms]
              AMD-01.SFBAY.SUN.COM = {
              kdc = amd-01.sfbay.sun.com
              admin_server = amd-01.sfbay.sun.com
              }

      .....

            smalkanisunw Seema Malkani (Inactive)
            wchensunw William Chen (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

              Created:
              Updated:
              Resolved:
              Imported:
              Indexed: