External-Mirrors/keycloak
2
0
Fork 0
mirror of https://github.com/keycloak/keycloak.git synced 2026-01-10 15:32:05 -03:30
Code Issues Packages Projects Releases Wiki Activity

Avoid NPE when checking exceptions for password based Kerberos login

Browse Source 
Closes #36061

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
This commit is contained in:
Alexander Schwartz 2024-12-19 18:03:12 +01:00 committed by Marek Posolda
parent 4669cfe9cb
commit 180be7b182
1 changed files with 17 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

27
federation/kerberos/src/main/java/org/keycloak/federation/kerberos/impl/KerberosUsernamePasswordAuthenticator.java
View File

@ -102,21 +102,28 @@ public class KerberosUsernamePasswordAuthenticator {
} }
protected void checkKerberosServerAvailable(LoginException le) { protected void checkKerberosServerAvailable(LoginException le) {
String message = le.getMessage().toUpperCase(); if (le.getMessage() != null) {
if (message.contains("PORT UNREACHABLE") || String message = le.getMessage().toUpperCase();
message.contains("CANNOT LOCATE") || if (message.contains("PORT UNREACHABLE") ||
message.contains("CANNOT CONTACT") || message.contains("CANNOT LOCATE") ||
message.contains("CANNOT FIND") || message.contains("CANNOT CONTACT") ||
message.contains("UNKNOWN ERROR") || message.contains("CANNOT FIND") ||
message.contains("RECEIVE TIMED OUT")) { message.contains("UNKNOWN ERROR") ||
message.contains("RECEIVE TIMED OUT")) {
throw new ModelException("Kerberos unreachable", le);
}
} else if (le.getCause() instanceof IOException) {
// for example, a PortUnreachable exception if the server is not running
throw new ModelException("Kerberos unreachable", le); throw new ModelException("Kerberos unreachable", le);
} }
} }
protected void checkKerberosUsername(LoginException le) { protected void checkKerberosUsername(LoginException le) {
String message = le.getMessage(); if (le.getMessage() != null) {
if (message.contains("IllegalArgumentException")) { String message = le.getMessage();
throw new ModelException("Kerberos illegal username", le); if (message.contains("IllegalArgumentException")) {
throw new ModelException("Kerberos illegal username", le);
}
} }
} }