4 Replies Latest reply on May 14, 2019 4:41 AM by simkam

Jboss Data source configuration test connection failed with Caused by: org.postgresql.util.PSQLException: GSS Authentication failed

charanc May 7, 2019 4:34 AM

Jboss Version: jboss-eap-7.0.4

Postgresql jar version : postgresql-42.2.5.jar

module.xml:

<?xml version="1.0" encoding="UTF-8"?>

<resource-root path="postgresql-42.2.5.jar"/>

</resources>

</dependencies>

</module>

Standalone.xml:

<connection-property name="url">jdbc:postgresql://dbhostname:5436/dbname</connection-property>

<connection-url>jdbc:postgresql://dbhostname:5436/dbname</connection-url>

<driver-class>org.postgresql.Driver</driver-class>

<datasource-class>org.postgresql.ds.PGSimpleDataSource</datasource-class>

<driver>PostgreSQL</driver>

<user-name>postgres</user-name>

<password>postgres</password>

</security>

<valid-connection-checker class-name="org.jboss.jca.adapters.jdbc.extensions.postgres.PostgreSQLValidConnectionChecker"/>

<background-validation>true</background-validation>

<exception-sorter class-name="org.jboss.jca.adapters.jdbc.extensions.postgres.PostgreSQLExceptionSorter"/>

</validation>

</datasource>

<xa-datasource-class>org.postgresql.xa.PGXADataSource</xa-datasource-class>

</driver>

</drivers>

Test connection I am getting below error message:

21:28:28,229 INFO [org.jboss.as] (Controller Boot Thread) WFLYSRV0060: Http management interface listening on http://127.0.0.1:9990/management

21:28:28,229 INFO [org.jboss.as] (Controller Boot Thread) WFLYSRV0051: Admin console listening on http://127.0.0.1:9990

21:28:28,229 INFO [org.jboss.as] (Controller Boot Thread) WFLYSRV0025: JBoss EAP 7.0.4.GA (WildFly Core 2.1.10.Final-redhat-1) started in 59557ms - Started 573 of 862 services (385 services are lazy, passive or on-demand)

21:28:57,559 WARN [org.jboss.jca.core.connectionmanager.pool.strategy.OnePool] (External Management Request Threads -- 3) IJ000604: Throwable while attempting to get a new connection: null: javax.resource.ResourceException: IJ031084: Unable to create connection

javax.resource.ResourceException: IJ031084: Unable to create connection

at org.jboss.jca.adapters.jdbc.local.LocalManagedConnectionFactory.createLocalManagedConnection(LocalManagedConnectionFactory.java:345)

at org.jboss.jca.adapters.jdbc.local.LocalManagedConnectionFactory.getLocalManagedConnection(LocalManagedConnectionFactory.java:352)

at org.jboss.jca.adapters.jdbc.local.LocalManagedConnectionFactory.createManagedConnection(LocalManagedConnectionFactory.java:287)

at org.jboss.jca.core.connectionmanager.pool.mcp.SemaphoreConcurrentLinkedDequeManagedConnectionPool.createConnectionEventListener(SemaphoreConcurrentLinkedDequeManagedConnectionPool.java:1320)

at org.jboss.jca.core.connectionmanager.pool.mcp.SemaphoreConcurrentLinkedDequeManagedConnectionPool.getConnection(SemaphoreConcurrentLinkedDequeManagedConnectionPool.java:496)

at org.jboss.jca.core.connectionmanager.pool.AbstractPool.internalTestConnection(AbstractPool.java:1052)

at org.jboss.jca.core.connectionmanager.pool.strategy.OnePool.testConnection(OnePool.java:93)

at org.jboss.as.connector.subsystems.common.pool.PoolOperations$TestConnectionInPool.invokeCommandOn(PoolOperations.java:234)

at org.jboss.as.connector.subsystems.common.pool.PoolOperations$1.execute(PoolOperations.java:90)

at org.jboss.as.controller.AbstractOperationContext.executeStep(AbstractOperationContext.java:890)

at org.jboss.as.controller.AbstractOperationContext.processStages(AbstractOperationContext.java:659)

at org.jboss.as.controller.AbstractOperationContext.executeOperation(AbstractOperationContext.java:370)

at org.jboss.as.controller.OperationContextImpl.executeOperation(OperationContextImpl.java:1344)

at org.jboss.as.controller.ModelControllerImpl.internalExecute(ModelControllerImpl.java:392)

at org.jboss.as.controller.ModelControllerImpl.execute(ModelControllerImpl.java:217)

at org.jboss.as.domain.http.server.DomainApiHandler.handleRequest(DomainApiHandler.java:210)

at io.undertow.server.handlers.encoding.EncodingHandler.handleRequest(EncodingHandler.java:72)

at org.jboss.as.domain.http.server.security.SubjectDoAsHandler$1.run(SubjectDoAsHandler.java:72)

at org.jboss.as.domain.http.server.security.SubjectDoAsHandler$1.run(SubjectDoAsHandler.java:68)

at java.security.AccessController.doPrivileged(Native Method)

at javax.security.auth.Subject.doAs(Subject.java:422)

at org.jboss.as.controller.AccessAuditContext.doAs(AccessAuditContext.java:92)

at org.jboss.as.domain.http.server.security.SubjectDoAsHandler.handleRequest(SubjectDoAsHandler.java:68)

at org.jboss.as.domain.http.server.security.SubjectDoAsHandler.handleRequest(SubjectDoAsHandler.java:63)

at io.undertow.server.handlers.BlockingHandler.handleRequest(BlockingHandler.java:56)

at org.jboss.as.domain.http.server.DomainApiCheckHandler.handleRequest(DomainApiCheckHandler.java:95)

at io.undertow.server.Connectors.executeRootHandler(Connectors.java:207)

at io.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:802)

at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)

at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)

at java.lang.Thread.run(Thread.java:748)

at org.jboss.threads.JBossThread.run(JBossThread.java:320)

Caused by: org.postgresql.util.PSQLException: GSS Authentication failed

at org.postgresql.gss.MakeGSS.authenticate(MakeGSS.java:66)

at org.postgresql.core.v3.ConnectionFactoryImpl.doAuthentication(ConnectionFactoryImpl.java:641)

at org.postgresql.core.v3.ConnectionFactoryImpl.tryConnect(ConnectionFactoryImpl.java:141)

at org.postgresql.core.v3.ConnectionFactoryImpl.openConnectionImpl(ConnectionFactoryImpl.java:192)

at org.postgresql.core.ConnectionFactory.openConnection(ConnectionFactory.java:49)

at org.postgresql.jdbc.PgConnection.<init>(PgConnection.java:195)

at org.postgresql.Driver.makeConnection(Driver.java:454)

at org.postgresql.Driver.connect(Driver.java:256)

at java.sql.DriverManager.getConnection(DriverManager.java:664)

at java.sql.DriverManager.getConnection(DriverManager.java:247)

at org.postgresql.ds.common.BaseDataSource.getConnection(BaseDataSource.java:94)

at org.jboss.jca.adapters.jdbc.local.LocalManagedConnectionFactory.createLocalManagedConnection(LocalManagedConnectionFactory.java:314)

... 31 more

Caused by: javax.security.auth.login.FailedLoginException: PBOX00070: Password invalid/Password required

at org.jboss.security.auth.spi.UsernamePasswordLoginModule.login(UsernamePasswordLoginModule.java:286)

at org.jboss.as.security.RealmDirectLoginModule.login(RealmDirectLoginModule.java:152)

at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)

at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)

at java.lang.reflect.Method.invoke(Method.java:498)

at javax.se

1. Re: Jboss Data source configuration test connection failed with Caused by: org.postgresql.util.PSQLException: GSS Authentication failed

mayerw01 May 7, 2019 4:55 AM (in response to charanc)

Your password seems to be wrong:
PBOX00070: Password invalid/Password required
Actions
2. Re: Jboss Data source configuration test connection failed with Caused by: org.postgresql.util.PSQLException: GSS Authentication failed

charanc May 10, 2019 8:38 PM (in response to mayerw01)

THank you for responding. I am passing correct pass word only. PostGresSQL DB is configured with Kerberos authentication mechanism. Due to which I am getting GSS authentication failed. How to we enable or indicate the datasource to use the Kerberos authentication mechanism.
Actions
3. Re: Jboss Data source configuration test connection failed with Caused by: org.postgresql.util.PSQLException: GSS Authentication failed

mayerw01 May 12, 2019 4:09 AM (in response to charanc)
Please look into Kerberos Based Authentication Migration - Latest WildFly Documentation - Project Documentation Editor and https://docs.wildfly.org/14/WildFly_Elytron_Security.html#Kerberos_Based_Authentication_Migration for more details.
But generally spoken you would have to:
Enable elytron on this data source like: /subsystem=datasources/data-source=PostgresTestDS:write-attribute(name=elytron-enabled,value=true)
Create your Kerberos Security Factory
Create an authentication configuration definition and add your Kerberos Security Factory
Add this authentication configuration to your Authentication Context
Add this Authentication Context to your data source

It should be possible to complete steps 2 to 5 via the WildFly console
Actions
4. Re: Jboss Data source configuration test connection failed with Caused by: org.postgresql.util.PSQLException: GSS Authentication failed

simkam May 14, 2019 4:41 AM (in response to mayerw01)

in jboss cli it should be something like this

/subsystem=elytron/kerberos-security-factory=krbsf:add(debug=true, principal=_PRINCIPAL_, path=_KEYTAB_, request-lifetime=-1, obtain-kerberos-ticket=true, server=false)
/subsystem=elytron/authentication-configuration=kerberos-conf:add(kerberos-security-factory=krbsf)
/subsystem=elytron/authentication-context=ds-context:add(match-rules=[{authentication-configuration=kerberos-conf}])
/subsystem=datasources/data-source=KerberosDS:add(connection-url="_URL_", min-pool-size=0, max-pool-size=10, jndi-name="java:jboss/datasource/KerberosDS"", driver-name=_DRIVER_, elytron-enabled=true, authentication-context=ds-context, allow-multiple-users=false, pool-prefill=false, spy=true, enabled=false)

but I have never tried it with PostgreSQL.
Actions

Go to original post