NPE in SunJaasKerberosTicketValidator with JDK 1.8.0_40

[koraktor]

While updating a project to 1.0.0.RC1 (from a customized 1.0.0.M2) I encountered the following error. The application ran fine with JDK 1.8.0, but updating to JDK 1.8.0_40 did completely break Kerberos authentication.

The error occurs inside SunJaasKerberosTicketValidator.KerberosValidateAction#run because context.getSrcName() is null.

I have no idea why this doesn't work on JDK 1.8.0_40, yet.

1. This should be fixed for JDK 1.8.0_40 (or any other affected versions). Maybe there is additional configuration needed.
2. The implementation should be adapted to handle such cases more gracefully (example).

[jvalkeal]

Right, thanks reporting this. Feels like a bug to me in jdk but I agree, it's better to throw something else than npe.

[jvalkeal]

Related jdk bug may be this https://bugs.openjdk.java.net/browse/JDK-8078439.

[igler]

Had the same issues and downgrading to JDK 8u31 helped.