Details
-
Type:
Enhancement
-
Status: Resolved
-
Priority:
P3
-
Resolution: Fixed
-
Affects Version/s: 7, 11
-
Fix Version/s: 13
-
Component/s: security-libs
-
Subcomponent:
-
Resolved In Build:b25
-
CPU:generic
-
OS:windows
Backports
Issue | Fix Version | Assignee | Priority | Status | Resolution | Resolved In Build |
---|---|---|---|---|---|---|
JDK-8226104 | 14 | Weijun Wang | P3 | Resolved | Fixed | team |
JDK-8234694 | 11.0.10 | Prasadarao Koppula | P3 | Resolved | Fixed | b05 |
JDK-8234695 | 8-pool | Prasadarao Koppula | P3 | Open | Unresolved |
Description
1. No need for krb5.ini and JAAS config
2. No need to retrieve TGT, thus no need for the allowtgtsessionkey registry key
3. Override the restriction when client is a member of local admin group
4. Server side program has no need to run setspn/ktpass
5. Server side program may be run as a Windows service
6. In Windows Server 2008, user2user authentication must be performed through their new protocol (http://tools.ietf.org/html/draft-swift-win2k-krb-user2user-03). SSPI automatically does this.
In the first stage, we should support client side using default credentials.
This provider must be interoperable with Java GSS provider and other native providers.
Attachments
Issue Links
- backported by
-
JDK-8234695 Provide a default native GSS-API library on Windows
-
- Open
-
-
JDK-8226104 Provide a default native GSS-API library on Windows
-
- Resolved
-
-
JDK-8234694 Provide a default native GSS-API library on Windows
-
- Resolved
-
- csr for
-
JDK-8210801 Provide a default native GSS-API library on Windows
-
- Closed
-
- duplicates
-
JDK-8161921 Windows 10 Credential Guard does not allow sharing of TGT with Java
-
- Closed
-
-
JDK-8054026 Java requires AllowTGTSessionKey = 1 for Kerberos SSO to work
-
- Closed
-
- relates to
-
JDK-8225687 Newly added sspi.cpp in JDK-6722928 still contains some small errors
-
- Resolved
-
-
JDK-8208299 Provide a way to clear NegotiateAuthentication cache
-
- Open
-
-
JDK-8230910 libsspi_bridge does not build on Windows 32bit
-
- Resolved
-
-
JDK-8161921 Windows 10 Credential Guard does not allow sharing of TGT with Java
-
- Closed
-
-
JDK-8199569 Client-side GSS-API Library for Windows SSPI
-
- Closed
-