[WSS-585] Kerberos processing fails on HP Java 8.0.06

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.6.19
• Fix Version/s: 2.0.10, 2.1.8
• Component/s: WSS4J Core
• Assignee: Colm O hEigeartaigh
• Reporter: Detelin Yordanov
• Created: 16/Aug/16 07:32
• Updated: 08/Dec/16 14:36
• Resolved: 24/Aug/16 10:36

Description

HP Java 8.0.06 changes the "java.vendor" property from "Hewlett-Packard Co" to "Hewlett Packard Enterprise".

This causes Kerberos-related functionality to fail to detect HP Java, since it checks this property and expects it to start with "Hewlett-Packard" (see KerberosClientExceptionAction and KerberosClientExceptionAction classes).

This will cause failure to extract proper Kerberos session key on HP Java.

A simple fix is to check for "Hewlett Packard" String as well.