Hi, +1 (binding) The current binaries, built with jdk 8, work as expected.
Tested Knoxshell (no issues) - sql datasource - webhdfs ls script Tested Knox (no issues) - oidc login (AzureAdClient, Auth0, Keycloak) all work. Tamás On Fri, Sep 18, 2026 at 10:21 PM Tom Bomk <[email protected]> wrote: > Hi, > > I was testing the binary distribution with JDK 8. > > Tested Knoxshell (no issues) > - sql datasource > - webhdfs ls script > > Tested Knox > - OIDC login (AzureAd) - this had an issue. > > https://localhost:8443/gateway/homepage/home/ gives internal server error > instead of redirecting to the IDP login page: > > HTTP ERROR 500 javax.servlet.ServletException: > javax.servlet.ServletException: java.lang.NoSuchMethodError: > java.nio.ByteBuffer.flip()Ljava/nio/ByteBuffer; > URI: /gateway/knoxsso/api/v1/websso > STATUS: 500 > MESSAGE: javax.servlet.ServletException: javax.servlet.ServletException: > java.lang.NoSuchMethodError: java.nio.ByteBuffer.flip()Ljava/nio/ByteBuffer; > SERVLET: knoxsso-knox-gateway-servlet > CAUSED BY: javax.servlet.ServletException: javax.servlet.ServletException: > java.lang.NoSuchMethodError: java.nio.ByteBuffer.flip()Ljava/nio/ByteBuffer; > CAUSED BY: javax.servlet.ServletException: java.lang.NoSuchMethodError: > java.nio.ByteBuffer.flip()Ljava/nio/ByteBuffer; > CAUSED BY: java.lang.NoSuchMethodError: > java.nio.ByteBuffer.flip()Ljava/nio/ByteBuffer; > > > Caused by: java.lang.NoSuchMethodError: > java.nio.ByteBuffer.flip()Ljava/nio/ByteBuffer; > at > org.apache.knox.gateway.services.security.EncryptionResult.toByteAray(EncryptionResult.java:45) > ~[gateway-spi-2.1.1.jar:2.1.1] > at > org.apache.knox.gateway.pac4j.session.KnoxSessionStore.compressEncryptBase64(KnoxSessionStore.java:159) > ~[gateway-provider-security-pac4j-2.1.1.jar:2.1.1] > at > org.apache.knox.gateway.pac4j.session.KnoxSessionStore.set(KnoxSessionStore.java:176) > ~[gateway-provider-security-pac4j-2.1.1.jar:2.1.1] > > Verified that gateway-spi-2.1.1.jar was built on JDK 11 with -target 8 but > not --release 8, > which caused ByteBuffer.flip() to be bound to the JDK 9+ covariant > overload that doesn't exist on Java 8, causing the runtime > NoSuchMethodError. > > When building with jdk 8, OIDC login works. > > Tamás > > > On Fri, Sep 18, 2026 at 6:40 PM Phil Zampino <[email protected]> wrote: > >> +1 (binding) >> >> I performed the following: >> >> - Verified signatures >> >> - Reviewed NOTICE, LICENSE and CHANGES files >> >> - Built from source >> >> - Tested APIKEY, CLIENTID and KNOXTOKEN services >> >> - Verified client_id validation >> >> - Verified getUserTokens fix >> >> Exercised UI >> >> >> >> >> On Thu, Sep 10, 2026 at 4:22 AM Tamás Hanicz <[email protected]> wrote: >> >> > Hi Folks, >> > >> > Release candidate #2 for the Apache Knox 2.1.1 release is available at: >> > https://dist.apache.org/repos/dist/dev/knox/knox-2.1.1/ >> > >> > The release candidate is a zip archive of the sources in: >> > https://https://gitbox.apache.org/repos/asf/knox.git >> > Branch v2.1.1 (git checkout -b v2.1.1) >> > >> > The KEYS file for signature validation is available at: >> > https://dist.apache.org/repos/dist/release/knox/KEYS >> > >> > Please find the most recent changes here: >> > https://github.com/apache/knox/blob/v2.1.1/CHANGES >> > >> > KnoxShell User Guide: >> > https://knox.apache.org/books/knox-2-1-0/knoxshell_user_guide.html >> > >> > Gateway User Guide: >> > http://knox.apache.org/books/knox-2-1-0/user-guide.html >> > >> > Dev Guide: >> > http://knox.apache.org/books/knox-2-1-0/dev-guide.html >> > >> > Please vote on releasing this package as Apache Knox 2.1.1. >> > The vote is open for the next 120 hours and passes if a majority of at >> > least three +1 Apache Knox PMC votes are cast. >> > >> > [ ] +1 Release this package as Apache Knox 2.1.1 >> > [ ] -1 Do not release this package because... >> > >> > Thanks,Tamás >> > >> >
