Loading...

XML

Word

Printable

Type: Bug
Resolution: Done
Priority: Major
Fix Version/s: 7.1.6.CR1, 7.1.6.GA
Affects Version/s: 7.0.0.ER7
Component/s: Security
Labels:
None

CDW devel_ack:
CDW docs_ack:
CDW pm_ack:
CDW qa_ack:
CDW release:
Target Release:

7.1.z.GA
Git Pull Request:
https://github.com/wildfly-security/wildfly-elytron/pull/1195
Steps to Reproduce:

Hide

testInvalidKerberosSpnegoWorkflow in https://github.com/jbossas/jboss-eap7/pull/457/commits/661c2c6c8a1b91feab54f3394c03e7a54818ed18

Show
testInvalidKerberosSpnegoWorkflow in https://github.com/jbossas/jboss-eap7/pull/457/commits/661c2c6c8a1b91feab54f3394c03e7a54818ed18

SFDC Cases Counter:
SFDC Cases Open:
SFDC Cases Links:

When the client sends an initial SPNEGO token with Kerberos as preferred mechanism and includes an invalid kerberos token, then client expects to see the WWW-Authenticate HTTP header with SPNEGO response negTokenResp[ negState = reject ].

As stated in SPNEGO specification negstat is required in first reply:

negState

...

      This field is REQUIRED in the first reply from the target, and is

      OPTIONAL thereafter.  When negState is absent, the actual state

      should be inferred from the state of the negotiated mechanism

      context.

is cloned by

ELY-715 SPNEGO: missing negState field in the first reply for defective token

Resolved

ELY-1547 SPNEGO: missing negstat field in the first reply for expired token

Resolved

is incorporated by

JBEAP-15482 (7.1.z) Upgrade Elytron from 1.1.11.Final to 1.1.12.Final

Closed

is related to

JBEAP-3709 [EAP 7] Negotiation/UnderTow does not handle the "Continuation Required" situation correctly

Closed

JBEAP-6679 Elytron SPNEGO: missing negstat field in the first reply

Closed

Assignee:: Ilia Vassilev

Reporter:: Martin Choma

Tester:: Martin Choma

QA Contact:: Martin Choma

Votes:: 0 Vote for this issue

Watchers:: 9 Start watching this issue

Created:: 2016/04/07 4:29 AM

Updated:: 2021/10/24 5:58 AM

Resolved:: 2018/11/28 9:58 AM

Details

Description

Attachments

Issue Links

Easy Agile Planning Poker

Activity

People

Dates