Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-6722928

Provide a default native GSS-API library on Windows

    Details

    • Subcomponent:
    • Resolved In Build:
      b25
    • CPU:
      generic
    • OS:
      windows

      Backports

        Description

        SSPI is the MS dialect of GSSAPI. We should support it in JDK on the Windows platform for better interop and system integration with Windows AD. Possible benefits are:

        1. No need for krb5.ini and JAAS config
        2. No need to retrieve TGT, thus no need for the allowtgtsessionkey registry key
        3. Override the restriction when client is a member of local admin group
        4. Server side program has no need to run setspn/ktpass
        5. Server side program may be run as a Windows service
        6. In Windows Server 2008, user2user authentication must be performed through their new protocol (http://tools.ietf.org/html/draft-swift-win2k-krb-user2user-03). SSPI automatically does this.

        In the first stage, we should support client side using default credentials.

        This provider must be interoperable with Java GSS provider and other native providers.

          Attachments

            Issue Links

            backported by

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8226104 Provide a default native GSS-API library on Windows

            • P3 - Major loss of function.
            • Resolved
            csr for

            CSR - null JDK-8210801 Provide a default native GSS-API library on Windows

            • P3 - Major loss of function.
            • Closed
            duplicates

            Enhancement - null JDK-8054026 Java requires AllowTGTSessionKey = 1 for Kerberos SSO to work

            • P4 - Minor loss of function, or other problem where easy workaround is present.
            • Closed
            relates to

            Bug - A problem which impairs or prevents the functions of the product. JDK-8225687 Newly added sspi.cpp in JDK-6722928 still contains some small errors

            • P3 - Major loss of function.
            • Resolved

            Enhancement - null JDK-8208299 Provide a way to clear NegotiateAuthentication cache

            • P4 - Minor loss of function, or other problem where easy workaround is present.
            • Open

            Enhancement - null JDK-8161921 Windows 10 Credential Guard does not allow sharing of TGT with Java

            • P2 - Crashes, loss of data, severe memory leak.
            • Open

            JEP - Java Enhancement Proposal JDK-8199569 Client-side GSS-API Library for Windows SSPI

            • P3 - Major loss of function.
            • Closed

              Activity

                People

                • Assignee:
                  weijun Weijun Wang
                  Reporter:
                  weijun Weijun Wang
                • Votes:
                  1 Vote for this issue
                  Watchers:
                  4 Start watching this issue

                  Dates

                  • Created:
                    Updated:
                    Resolved:
                    Imported:
                    Indexed: