You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@qpid.apache.org by "Justin Ross (JIRA)" <ji...@apache.org> on 2017/08/14 18:30:00 UTC
[jira] [Created] (PROTON-1539) Kerberos SASL exchange results in
malformed SASL response frame
Justin Ross created PROTON-1539:
-----------------------------------
Summary: Kerberos SASL exchange results in malformed SASL response frame
Key: PROTON-1539
URL: https://issues.apache.org/jira/browse/PROTON-1539
Project: Qpid Proton
Issue Type: Bug
Components: proton-c
Reporter: Justin Ross
Assignee: Andrew Stitcher
{noformat}
[jross@localhost clients]$ PN_TRACE_FRM=1 ./connect upto.nogood.industries jgecko@NOGOOD.INDUSTRIES
[0x2187480]: -> SASL
[0x2187480]: <- SASL
[0x2187480]:0 <- @sasl-mechanisms(64) [sasl-server-mechanisms=@PN_SYMBOL[:GSSAPI]]
[15271] 1502727697.649006: ccselect module realm chose cache KEYRING:persistent:1000:1000 with client principal jgecko@NOGOOD.INDUSTRIES for server principal amqp/upto.nogood.industries@NOGOOD.INDUSTRIES
[15271] 1502727697.649050: Getting credentials jgecko@NOGOOD.INDUSTRIES -> amqp/upto.nogood.industries@NOGOOD.INDUSTRIES using ccache KEYRING:persistent:1000:1000
[15271] 1502727697.649097: Retrieving jgecko@NOGOOD.INDUSTRIES -> amqp/upto.nogood.industries@NOGOOD.INDUSTRIES from KEYRING:persistent:1000:1000 with result: 0/Success
[15271] 1502727697.649127: Creating authenticator for jgecko@NOGOOD.INDUSTRIES -> amqp/upto.nogood.industries@NOGOOD.INDUSTRIES, seqnum 160996154, subkey aes128-cts/4C79, session key aes128-cts/3329
[0x2187480]:0 -> @sasl-init(65) [mechanism=:GSSAPI, initial-response=b"`\x82\x02c\x06\x09*\x86H\x86\xf7\x12\x01\x02\x02\x01\x00n\x82\x02R0\x82\x02N\xa0\x03\x02\x01\x05\xa1\x03\x02\x01\x0e\xa2\x07\x03\x05\x00 \x00\x00\x00\xa3\x82\x01oa\x82\x01k0\x82\x01g\xa0\x03\x02\x01\x05\xa1\x13\x1b\x11NOGOOD.INDUSTRIES\xa2)0'\xa0\x03\x02\x01\x03\xa1 0\x1e\x1b\x04amqp\x1b\x16upto.nogood.industries\xa3\x82\x01\x1e0\x82\x01\x1a\xa0\x03\x02\x01\x11\xa1\x03\x02\x01\x06\xa2\x82\x01\x0c\x04\x82\x01\x08\x91\x86\xd8\x9f\x081\xde\x87{?\x02a\xdf\xdc\x82\x81{L%+u\xd9\\xad\xf4J\xdbO\x9cAhi\x97\x97\xdd/q\xa7\xd2a\xa9\x0e\x88H\x00\x87S\xf3\xdc\xcf\x1c\xfc\xbd\x1b\x10\xb0\xf1\xf6\x88p'et-4~HQ\xce\x86d\x00\xd5\x99q\x90\xd7p\xee\x06`\xfc<\x85\xed\xbd\xe7xO\x09\xc6\x1d'\xb7j\x88l4\xa3\xfc\x9b\xab\xc6\x18\x12/!d\xdd\x13\x11\x84\x950\xa2z_2\x82#qb\x16\xa5Dz\x7f\x0a\xbb\xe1\xc9\xa9\xd6\xea\x14\xed\x8e\x0e\x96\xe3\x04\x9bz{\x7f\x9ff\xc4\xbd\x1cn\x1d\x8f\xe8\x18\x1bp\xc7\xbf\x1c(\xcb\xfa5yG|\x8f\x09FI\x86\x93?\x10\x13\x17Q\xfc\xa3\x9d\xe3R\xe1\x00\xb1\xe0\x90\x9a\x99\x01\x00\xdduS_\xd7<\x96\xceE\xf1"'pW\xa1T\x0f\xc9\xff\x83t\x01>\x8b\xb40\xcbD\xb2e\xb3\xdd\x0dN(\x15\xe8_\xf4\xf5H\xc0#\xb1\x07=\x07\x85!)\xf2\xd7\xb6\xef\xb6<\xc2\xcb\x06\xc6\xc9\xa7f\xe7\xe6'\xe6C\x05\xf2\x9d\xe2\xa4\x81\xc50\x81\xc2\xa0\x03\x02\x01\x11\xa2\x81\xba\x04\x81\xb7\x94\xb9\xcb\x10\xb4(?\xee\xa5s\x01\xe0\x8fh\xbf[\xa5w\x9a\xe5\x8az\xaa\xbasC\xfd\xf4\xa5\x12O\x19T\x15\xcce\x0b\x84/6\x00\x9c\xec\xb9\xc7\x1f\x0b\x1fY\x94\xc4\xd2\xa74(=\xbfL:oS\xcc\xe8\xe1\xceBA"\xcd\xa3\xd5s\\xfcG\x1aW\x8c)\xb5:V\xc3|\x97\xc0Q\x12Y \xfc\xaaK\x95A$s\xdc\xcb\xc5\xdb\x86\xff\x11\xbb\xbe\xfd\xf0A\xb6Q\xf3.QP\xfb\xa5\x85\xb8\xd7f\xe8\xb9\xb8\xa6\x13h\x82q\x80\x08\xf8\\xcb\x19\xa7\xd3\x94\xf4\xa8\xcf\x89,\x8a\xa4(\x10(\x0aj\xa9[0\x87\x14\xb7|y\x83\x81z\x16\xe8\xf6i\\x19\x0b\xc4\xa1\x87$\xc0\x0bi.\x7f\xea\xd4\xfan*B"]
[0x2187480]:0 <- @sasl-challenge(66) [challenge=b"`j\x06\x09*\x86H\x86\xf7\x12\x01\x02\x02\x02\x00o[0Y\xa0\x03\x02\x01\x05\xa1\x03\x02\x01\x0f\xa2M0K\xa0\x03\x02\x01\x11\xa2D\x04BkF\x94\x1f\x1a\x00\xf24\xbd\xa0r\x1f\x08\xac\x88\x8c\xa4\x9af\xc1#\xd6\x08\x0b=k~\xf1>"\xbflBgi\x1a"\x1f \xbd\x80\x1a4\xd5\xc1\xb4\xe1\x85j-&R\x9e\x81\xa2\xc9\xd9B>\xc8\xb5a<\xf2\x06\x1a"]
[15271] 1502727697.949917: Read AP-REP, time 1502727697.649131, subkey (null), seqnum 804124638
[0x2187480]:0 -> @sasl-response(67) [] <<<<<<<<<<<<<<<<<<<<<<<<<<<<<
[0x2187480]:0 <- @sasl-challenge(66) [challenge=b"\x05\x04\x01\xff\x00\x0c\x00\x00\x00\x00\x00\x00/\xed\xf7\xde\x01\x01\x00\x00L\xea\xca\x166j\x1b\xf7hVmq"]
[0x2187480]:0 -> @sasl-response(67) [response=b"\x05\x04\x00\xff\x00\x0c\x00\x00\x00\x00\x00\x00\x09\x98\x9b:\x01\x00\x00\x00\xf7Q\xd1\x86\x91\x87] \xe3\xbaH\xfd"]
[0x2187480]: <- EOS
[0x2187480]: -> EOS
terminate called after throwing an instance of 'proton::error'
what(): amqp:connection:framing-error: connection aborted
Aborted (core dumped)
{noformat}
{noformat}
Caused by: org.apache.qpid.proton.codec.DecodeException: Unexpected null value - mandatory field not set? (the response field is mandatory)
at org.apache.qpid.proton.codec.DynamicTypeConstructor.readValue(DynamicTypeConstructor.java:43) [proton-j-0.20.0.jar:]
at org.apache.qpid.proton.codec.DecoderImpl.readObject(DecoderImpl.java:885) [proton-j-0.20.0.jar:]
at org.apache.qpid.proton.engine.impl.SaslFrameParser.input(SaslFrameParser.java:349) [proton-j-0.20.0.jar:]
... 22 more
Caused by: java.lang.NullPointerException: the response field is mandatory
at org.apache.qpid.proton.amqp.security.SaslResponse.setResponse(SaslResponse.java:43) [proton-j-0.20.0.jar:]
at org.apache.qpid.proton.codec.security.SaslResponseType.newInstance(SaslResponseType.java:80) [proton-j-0.20.0.jar:]
at org.apache.qpid.proton.codec.security.SaslResponseType.newInstance(SaslResponseType.java:39) [proton-j-0.20.0.jar:]
at org.apache.qpid.proton.codec.DynamicTypeConstructor.readValue(DynamicTypeConstructor.java:39) [proton-j-0.20.0.jar:]
{noformat}
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@qpid.apache.org
For additional commands, e-mail: dev-help@qpid.apache.org