JBOSS-EAP 8 resolving urlContext as null for LDAP Domains

Solution In Progress - Updated -

Issue

  • Application code resolves urlContext as null when using DnsContextFactory to search for LDAP domains.
  • JBOSS-EAP 8 with SPNEGO and Kerberos does not resolve urlContext for LDAP Domains in SRV records.
2024-08-27 14:08:22,572 TRACE [org.wildfly.security] (default task-1) SPNEGO: org.wildfly.security.http.HttpAuthenticationException: ELY05053: Callback handler failed for unknown reason
        at org.wildfly.security.elytron-base@2.2.6.Final-redhat-00001//org.wildfly.security.http.spnego.SpnegoAuthenticationMechanism.evaluateRequest(SpnegoAuthenticationMechanism.java:187)
        at org.wildfly.security.elytron-base@2.2.6.Final-redhat-00001//org.wildfly.security.http.util.SetMechanismInformationMechanismFactory$1.evaluateRequest(SetMechanismInformationMechanismFactory.java:119)
        at org.wildfly.security.elytron-base@2.2.6.Final-redhat-00001//org.wildfly.security.http.util.SocketAddressCallbackServerMechanismFactory$1.evaluateRequest(SocketAddressCallbackServerMechanismFactory.java:82)
Caused by: java.io.IOException: ELY01156: Cannot obtain a credential from a security factory
        at org.wildfly.security.elytron-base@2.2.6.Final-redhat-00001//org.wildfly.security.credential.source.CredentialSource$4.getCredential(CredentialSource.java:327)
        at org.wildfly.security.elytron-base@2.2.6.Final-redhat-00001//org.wildfly.security.auth.server.ServerAuthenticationContext$1.handleOne(ServerAuthenticationContext.java:1021)
        at org.wildfly.security.elytron-base@2.2.6.Final-redhat-00001//org.wildfly.security.auth.server.ServerAuthenticationContext$1.handle(ServerAuthenticationContext.java:873)
        at org.wildfly.security.elytron-base@2.2.6.Final-redhat-00001//org.wildfly.security.auth.server.SecurityIdentityServerMechanismFactory$SecurityIdentityCallbackHandler.handle(Security
Caused by: KrbException: Cannot locate KDC
        at java.security.jgss/sun.security.krb5.Config.getKDCList(Config.java:1275)
        at java.security.jgss/sun.security.krb5.KdcComm.send(KdcComm.java:217)
        at java.security.jgss/sun.security.krb5.KdcComm.send(KdcComm.java:199)
        at java.security.jgss/sun.security.krb5.KrbAsReqBuilder.send(KrbAsReqBuilder.java:345)
        at java.security.jgss/sun.security.krb5.KrbAsReqBuilder.action(KrbAsReqBuilder.java:498)
        at jdk.security.auth/com.sun.security.auth.module.Krb5LoginModule.attemptAuthentication(Krb5LoginModule.java:761)
        ... 63 more
Caused by: KrbException: Generic error (description in e-text) (60) - Unable to locate KDC for realm TULLVERKET.SE
        at java.security.jgss/sun.security.krb5.Config.getKDCFromDNS(Config.java:1372)
        at java.security.jgss/sun.security.krb5.Config.getKDCList(Config.java:1248)

Environment

  • Red Hat JBOSS Enterprise Application Platform
    • 8.0.0

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content