RSSO-Kerberos Authentication does not work with Open JDK 11

Version 3
    Share This:

    This document contains official content from the BMC Software Knowledge Base. It is automatically updated when the knowledge article is modified.


    PRODUCT:

    Remedy Single Sign On


    COMPONENT:

    Remedy Single Sign On


    APPLIES TO:

    RSSO Kerberos with Open JDK 11



    PROBLEM:

    After switching RSSO 19.05 from Oracle Java 1.8.0_92 to Open JDK 11, the Kerberos authentication stops working even though JCE is enabled by default in Open JDK 11 (Reference KA 000148460).

    rsso.log in DEBUG mode shows :

    Service login failed. 
    javax.security.auth.login.LoginException: krb5.conf loading failed 
    when using OpenJDK 11. 

     


    CAUSE:

    krb5.conf file contained non-UTF-8 encoding symbols


    SOLUTION:

    - In the krb5.conf file, replace the symbols with XX and save file as UTF-8 (it is ISO_8859_1 encoded by default)
    - Place the modified krb5.conf in the following path:
    /usr/java/jdk-11.0.2/conf/security
    ----------
    Modified krb5.conf file is attached.

     


    Article Number:

    000172630


    Article Type:

    Solutions to a Product Problem



      Looking for additional information?    Search BMC Support  or  Browse Knowledge Articles