[CONJ-1021] GSSAPI using waffle issue resulting in Connection reset Created: 2022-11-02 Updated: 2022-11-21 Resolved: 2022-11-03 |
|
| Status: | Closed |
| Project: | MariaDB Connector/J |
| Component/s: | authentication |
| Affects Version/s: | 3.0.8 |
| Fix Version/s: | 2.7.7, 3.0.9, 3.1.0 |
| Type: | Bug | Priority: | Major |
| Reporter: | Diego Dupin | Assignee: | Diego Dupin |
| Resolution: | Fixed | Votes: | 0 |
| Labels: | None | ||
| Issue Links: |
|
||||||||
| Description |
|
When using GSSAPI authentication using waffle, connection result in "Connection reset" error. |
| Comments |
| Comment by Vladislav Vaintroub [ 2022-11-02 ] |
|
This might be an issue when using "Negotiate" mechanism, which outside of domain environment falls back to NTLM. The client seems to wait to read OK packer from the server, but it did not send a SSPI message that server expects. So, the server and the client are both stuck in "read", for 5 seconds, then read timeout seems to fire off. |
| Comment by Diego Dupin [ 2022-11-03 ] |
|
Correction validated by tests. |
| Comment by Diego Dupin [ 2022-11-07 ] |
|
test correction (removing administrator) https://github.com/mariadb-corporation/mariadb-connector-j/commit/eadfa6394c1375c68622f6f5f0b339dec64b206d |