Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-6951366

kerberos login failure on win2008 with AD set to win2000 compat mode

    XMLWordPrintable

    Details

    • Subcomponent:
    • Resolved In Build:
      b100
    • CPU:
      x86
    • OS:
      windows_2008
    • Verification:
      Verified

      Backports

        Description

        When CU application tries user authentification in com.sun.security.auth.module.Krb5LoginModule,
        that fails under the following condition.

        - Under Windows Server 2008 or Windows Server 2008 R2
        - When ActiveDirectory is constructed, the domain functional level is set to 2000 or 2003.
        - The client side of Kerberos uses Krb5LoginModule in jdk5u11.
        - The setting of Kerberos enctypes is set to default value.(Not to specify any value explicitly)

        REPRODUCE:
        1) To set jaaskrb.conf and krb5.conf to c:\tmp\
        2) To open krb5.conf and change the inf. of default_realm and [realms] to
           inf. of the authentification server.
        3) To Execute KrbSample.java and input user name and password

          Attachments

            Issue Links

              Activity

                People

                Assignee:
                weijun Weijun Wang
                Reporter:
                tbaba Tadayuki Baba (Inactive)
                Votes:
                0 Vote for this issue
                Watchers:
                1 Start watching this issue

                  Dates

                  Created:
                  Updated:
                  Resolved:
                  Imported:
                  Indexed: