Modified WinRM classes to work with IBM JDK

src/main/java/com/xebialabs/overthere/cifs/winrm/JavaVendor.java

@@ -0,0 +1,36 @@
+/*
+ * Copyright (c) 2008-2014, XebiaLabs B.V., All rights reserved.
+ *
+ *
+ * Overthere is licensed under the terms of the GPLv2
+ * <http://www.gnu.org/licenses/old-licenses/gpl-2.0.html>, like most XebiaLabs Libraries.
+ * There are special exceptions to the terms and conditions of the GPLv2 as it is applied to
+ * this software, see the FLOSS License Exception
+ * <http://github.com/xebialabs/overthere/blob/master/LICENSE>.
+ *
+ * This program is free software; you can redistribute it and/or modify it under the terms
+ * of the GNU General Public License as published by the Free Software Foundation; version 2
+ * of the License.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY;
+ * without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
+ * See the GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License along with this
+ * program; if not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth
+ * Floor, Boston, MA 02110-1301  USA
+ */
+package com.xebialabs.overthere.cifs.winrm;
+
+import java.util.HashMap;
+import javax.security.auth.login.AppConfigurationEntry;
+import javax.security.auth.login.Configuration;
+
+class JavaVendor {
+
+	private static final boolean IBM_JAVA =  System.getProperty("java.vendor").contains("IBM");
+
+	public static boolean isIBM() {
+		return IBM_JAVA;
+	}
+}

src/main/java/com/xebialabs/overthere/cifs/winrm/KerberosJaasConfiguration.java

@@ -37,16 +37,27 @@ class KerberosJaasConfiguration extends Configuration {
     @Override
     public AppConfigurationEntry[] getAppConfigurationEntry(String s) {
         final HashMap<String, String> options = new HashMap<String, String>();
-        options.put("client", "true");
-        options.put("useTicketCache", "false");
-        options.put("useKeyTab", "false");
-        options.put("doNotPrompt", "false");
-        options.put("refreshKrb5Config", "true");
-        if (debug) {
-            options.put("debug", "true");
+
+        if (JavaVendor.isIBM()) {
+            options.put("refreshKrb5Config", "true");
+        } else {
+            options.put("client", "true");
+            options.put("useTicketCache", "false");
+            options.put("useKeyTab", "false");
+            options.put("doNotPrompt", "false");
+            options.put("refreshKrb5Config", "true");
+            if (debug) {
+                options.put("debug", "true");
+            }
         }
-        return new AppConfigurationEntry[]{new AppConfigurationEntry("com.sun.security.auth.module.Krb5LoginModule",
+
+        return new AppConfigurationEntry[]{new AppConfigurationEntry(getKrb5LoginModuleName(),
                 AppConfigurationEntry.LoginModuleControlFlag.REQUIRED, options)};
     }
 
+    private String getKrb5LoginModuleName() {
+        return (JavaVendor.isIBM() ? "com.ibm.security.auth.module.Krb5LoginModule"
+            : "com.sun.security.auth.module.Krb5LoginModule");
+    }
+
 }

src/main/java/com/xebialabs/overthere/cifs/winrm/WsmanSPNegoScheme.java

@@ -69,7 +69,10 @@ protected byte[] generateGSSToken(final byte[] input, final Oid oid, String auth
         GSSName canonicalizedName = serverName.canonicalize(oid);
 
         logger.debug("Creating SPNego GSS context for canonicalized SPN {}", canonicalizedName);
-        GSSContext gssContext = manager.createContext(canonicalizedName, oid, null, GSSContext.DEFAULT_LIFETIME);
+        // With IBM JDK we need to use GSSContext.INDEFINITE_LIFETIME for SPNEGO
+        // ref http://www-01.ibm.com/support/docview.wss?uid=swg1IZ54545
+        int spnegoLifetime = (JavaVendor.isIBM() ? GSSContext.INDEFINITE_LIFETIME : GSSContext.DEFAULT_LIFETIME);
+        GSSContext gssContext = manager.createContext(canonicalizedName, oid, null, spnegoLifetime);
         gssContext.requestMutualAuth(true);
         gssContext.requestCredDeleg(true);
         return gssContext.initSecContext(token, 0, token.length);