IBM Semeru Runtime Certified Edition for z/OS, Kerberos and mssql-jdbc don't work together

[trzpiot]

Driver version

12.4.2.jre11

Client Operating System

z/OS

JAVA/JVM version

IBM Semeru Runtime Certified Edition for z/OS 17.0.7.0 (https://www.ibm.com/docs/en/semeru-runtime-ce-z/17)

Problem description

The following exception is thrown:

javax.security.auth.login.LoginException (No LoginModule found for com.ibm.security.auth.module.Krb5LoginModule)

Same problem as with #2139.

The check in #2209 on java.vm.name causes still false-positives, because the IBM Semeru Runtime Certified Edition for z/OS still uses IBM J9 VM [...] as java.vm.name. It then accesses com.ibm.security.auth.module.Krb5LoginModule instead of com.sun.security.auth.module.Krb5LoginModule. Only the latter is available on the Semeru runtime.

[machavan]

Hi @trzpiot

We are looking into addressing this issue.

As a temporary workaround, you can setup a JAAS config and set a correct login module,

• using jaasConfigurationName connection property
• or programmatically overriding the JAAS config and use the useDefaultJaasConfig connection property