Hi,

I was testing the binary distribution with JDK 8.

Tested Knoxshell (no issues)
- sql datasource
- webhdfs ls script

Tested Knox
- OIDC login (AzureAd) - this had an issue.

https://localhost:8443/gateway/homepage/home/ gives internal server error
instead of redirecting to the IDP login page:

HTTP ERROR 500 javax.servlet.ServletException:
javax.servlet.ServletException: java.lang.NoSuchMethodError:
java.nio.ByteBuffer.flip()Ljava/nio/ByteBuffer;
URI: /gateway/knoxsso/api/v1/websso
STATUS: 500
MESSAGE: javax.servlet.ServletException: javax.servlet.ServletException:
java.lang.NoSuchMethodError: java.nio.ByteBuffer.flip()Ljava/nio/ByteBuffer;
SERVLET: knoxsso-knox-gateway-servlet
CAUSED BY: javax.servlet.ServletException: javax.servlet.ServletException:
java.lang.NoSuchMethodError: java.nio.ByteBuffer.flip()Ljava/nio/ByteBuffer;
CAUSED BY: javax.servlet.ServletException: java.lang.NoSuchMethodError:
java.nio.ByteBuffer.flip()Ljava/nio/ByteBuffer;
CAUSED BY: java.lang.NoSuchMethodError:
java.nio.ByteBuffer.flip()Ljava/nio/ByteBuffer;


Caused by: java.lang.NoSuchMethodError:
java.nio.ByteBuffer.flip()Ljava/nio/ByteBuffer;
        at
org.apache.knox.gateway.services.security.EncryptionResult.toByteAray(EncryptionResult.java:45)
~[gateway-spi-2.1.1.jar:2.1.1]
        at
org.apache.knox.gateway.pac4j.session.KnoxSessionStore.compressEncryptBase64(KnoxSessionStore.java:159)
~[gateway-provider-security-pac4j-2.1.1.jar:2.1.1]
        at
org.apache.knox.gateway.pac4j.session.KnoxSessionStore.set(KnoxSessionStore.java:176)
~[gateway-provider-security-pac4j-2.1.1.jar:2.1.1]

Verified that gateway-spi-2.1.1.jar was built on JDK 11 with -target 8 but
not --release 8,
which caused ByteBuffer.flip() to be bound to the JDK 9+ covariant overload
that doesn't exist on Java 8, causing the runtime NoSuchMethodError.

When building with jdk 8, OIDC login works.

Tamás


On Fri, Sep 18, 2026 at 6:40 PM Phil Zampino <[email protected]> wrote:

> +1 (binding)
>
> I performed the following:
>
> - Verified signatures
>
> - Reviewed NOTICE, LICENSE and CHANGES files
>
> - Built from source
>
> - Tested APIKEY, CLIENTID and KNOXTOKEN services
>
>    - Verified client_id validation
>
>    - Verified getUserTokens fix
>
> Exercised UI
>
>
>
>
> On Thu, Sep 10, 2026 at 4:22 AM Tamás Hanicz <[email protected]> wrote:
>
> >  Hi Folks,
> >
> > Release candidate #2 for the Apache Knox 2.1.1 release is available at:
> > https://dist.apache.org/repos/dist/dev/knox/knox-2.1.1/
> >
> > The release candidate is a zip archive of the sources in:
> > https://https://gitbox.apache.org/repos/asf/knox.git
> > Branch v2.1.1 (git checkout -b v2.1.1)
> >
> > The KEYS file for signature validation is available at:
> > https://dist.apache.org/repos/dist/release/knox/KEYS
> >
> > Please find the most recent changes here:
> > https://github.com/apache/knox/blob/v2.1.1/CHANGES
> >
> > KnoxShell User Guide:
> > https://knox.apache.org/books/knox-2-1-0/knoxshell_user_guide.html
> >
> > Gateway User Guide:
> > http://knox.apache.org/books/knox-2-1-0/user-guide.html
> >
> > Dev Guide:
> > http://knox.apache.org/books/knox-2-1-0/dev-guide.html
> >
> > Please vote on releasing this package as Apache Knox 2.1.1.
> > The vote is open for the next 120 hours and passes if a majority of at
> > least three +1 Apache Knox PMC votes are cast.
> >
> > [ ] +1 Release this package as Apache Knox 2.1.1
> > [ ] -1 Do not release this package because...
> >
> > Thanks,Tamás
> >
>

Reply via email to