[KARAF-6517] LDAPLoginModule + SSL + connection timeout problem

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 4.2.7
• Fix Version/s: 4.3.0, 4.2.8
• Component/s: karaf
• Assignee: Grzegorz Grzybek
• Reporter: Grzegorz Grzybek
• Created: 13/Nov/19 14:02
• Updated: 13/Nov/19 14:59
• Resolved: 13/Nov/19 14:59

Description

Karaf uses special org.apache.karaf.jaas.modules.ldap.ManagedSSLSocketFactory that extends javax.net.ssl.SSLSocketFactory class. And when you have connection timeout specified, first (using reflection) this method is called:

javax.net.SocketFactory#createSocket()

in base class (SocketFactory), it simply throws UnsupportedOperationException with Unconnected sockets not implemented message!
sun.security.ssl.SSLSocketFactoryImpl#createSocket() is correct, as it creates unconnected socket, but ManagedSSLSocketFactory extends javax.net.ssl.SSLSocketFactory directly and doesn't implement no-arg createSocket() method.

So I have to fix org.apache.karaf.jaas.modules.ldap.ManagedSSLSocketFactory.

Issue Links

• is related to: KARAF-4607 ldap connection pool not created when using ssl (ldaps)