Uploaded image for project: 'OpenAM'
  1. OpenAM
  2. OPENAM-16907

Kerberos Node in 7.0 does not work

    XMLWordPrintable

    Details

    • Needs backport:
      Yes
    • Needs QA verification:
      No

      Description

      Bug description

      The out of the box Kerberos Node for AM 7.0 fails with error:

      _o.f.o.a.t.e.AuthTreeExecutor: 2020-10-01 16:37:23,784: Thread[https-jsse-nio-8443-exec-6]: TransactionId[dfdac558-294f-4f33-8d9d-504de22d31df-177]
       ERROR: Node processing failed
       org.forgerock.json.JsonValueException: /universalId: Expecting a java.lang.String
       [CONTINUED] at org.forgerock.json.JsonValue.expect(JsonValue.java:766)
       [CONTINUED] at org.forgerock.json.JsonValue.asString(JsonValue.java:654)
       [CONTINUED] at org.forgerock.openam.auth.nodes.KerberosNode.process(KerberosNode.java:218)_

       

      How to reproduce the issue

      Use the Kerberos Node per instructions

      _https://backstage.forgerock.com/docs/am/7/authentication-guide/auth-node-configuration-hints.html#auth-node-kerberos_

       

      Workaround

      None, outside accessing the source and rebuilding the Kerberos Node with the patch below.

       

      Code analysis

      KerberosNode.java

      Line 294 is the cause of the error:
      
      Buggy code:
      sharedState.put(SharedStateConstants.UNIVERSAL_ID, universalId);
      
      Fixed code:
      sharedState.put(SharedStateConstants.UNIVERSAL_ID, universalId.get());

       

        Attachments

          Activity

            People

            Assignee:
            phillcunnington Phill Cunnington
            Reporter:
            justin.chin Justin Chin
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved: