Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-6951366

kerberos login failure on win2008 with AD set to win2000 compat mode

    Details

    • Subcomponent:
    • Resolved In Build:
      b100
    • CPU:
      x86
    • OS:
      windows_2008
    • Verification:
      Verified

      Backports

        Description

        When CU application tries user authentification in com.sun.security.auth.module.Krb5LoginModule,
        that fails under the following condition.

        - Under Windows Server 2008 or Windows Server 2008 R2
        - When ActiveDirectory is constructed, the domain functional level is set to 2000 or 2003.
        - The client side of Kerberos uses Krb5LoginModule in jdk5u11.
        - The setting of Kerberos enctypes is set to default value.(Not to specify any value explicitly)

        REPRODUCE:
        1) To set jaaskrb.conf and krb5.conf to c:\tmp\
        2) To open krb5.conf and change the inf. of default_realm and [realms] to
           inf. of the authentification server.
        3) To Execute KrbSample.java and input user name and password

          Attachments

            Issue Links

              Activity

                People

                • Assignee:
                  weijun Weijun Wang
                  Reporter:
                  tbaba Tadayuki Baba (Inactive)
                • Votes:
                  0 Vote for this issue
                  Watchers:
                  1 Start watching this issue

                  Dates

                  • Created:
                    Updated:
                    Resolved:
                    Imported:
                    Indexed: