42.4.1 JDK18 GSS compat getCurrentSubject WrongMethodTypeException

[Rob4001]

Please read https://stackoverflow.com/help/minimal-reproducible-example

Describe the issue
New compatibility reflection released as part of 42.4.1 breaks for pre JDK18 versions due to a casting error #2535

MakeGSS.java line 104-106

Driver Version?
42.4.1
Java Version?
11
OS Version?
Windows Server 2016
PostgreSQL Version?
CRDB 21.1.13
To Reproduce
Steps to reproduce the behaviour:

1. Setup JDBC connection using JAAS, and com.sun.security.auth.module.Krb5LoginModule true
2. Attempt connection to database

Expected behaviour
Should connect to DB using GSSAPI Auth

Throws exception

org.postgresql.util.PSQLException :GSS Authentication failed
at org.postgresql.gss.MakeGSS.authenticate (MakeGSS.java:173
Caused by: java.lang.invoke.WrongMethodTypeException: expected ()Access control context but found ()Object

[davecramer]

do you happen to have the rest of the stacktrace ?

[davecramer]

what is CRDB ?

[Rob4001]

do you happen to have the rest of the stacktrace ?

Sadly due to work policies I cannot share direct

what is CRDB ?

CockroachDB so pgwire 3.0 I think?

[davecramer]

Well I'd like to know which method is causing the problem

[Rob4001]

Well I'd like to know which method is causing the problem

return (Subject) SUBJECT_GET_SUBJECT.invoke(
          ACCESS_CONTROLLER_GET_CONTEXT.invokeExact()
      );

Reflective call to this method

[davecramer]

@Rob4001 is there any way you can test PR #2589 ?

[davecramer]

@Rob4001 one more time ? #2595

[Rob4001]

@Rob4001 one more time ? #2595

Looks like that will do the trick, although probably will break java 18 support due to direct reference to removed class.

Locally compiled version works with our usecase.

What is the normal turnaround time for a patch version release once this is merged?

[davecramer]

Looks like that will do the trick, although probably will break java 18 support due to direct reference to removed class.

ah, yes, so we can change invokeExact to invoke to remove the reference.

[davecramer]

OK, removed direct reference. Can you test one more time, if it works I will merge and release ASAP

[Rob4001]

Latest works!

Thanks for the quick turnaround, would have contributed code personally but hands tied by work policies

[davecramer]

I've released 42.4.2 Thanks for your help. Dave Cramer

…

On Tue, 16 Aug 2022 at 09:48, Robert Wilson ***@***.***> wrote: Latest works! Thanks for the quick turnaround, would have contributed code personally but hands tied by work policies — Reply to this email directly, view it on GitHub <#2588 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AADDH5V5Z2DS4H47PBJZJA3VZOL2BANCNFSM56MCKTCQ> . You are receiving this because you commented.Message ID: ***@***.***>

[Rob4001]

Tested release, works wonderfully :)

Closing Issue

[davecramer]

Again, thanks so much for your assistance in this matter. GSS is one of the harder things to automate tests for