Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8153932

Update Kerberos 5 GSS-API Mechanism technotes

    Details

    • Type: Enhancement
    • Status: Resolved
    • Priority: P3
    • Resolution: Fixed
    • Affects Version/s: 9
    • Fix Version/s: 9
    • Component/s: docs
    • Labels:

      Description

      Kerberos 5 enhancements for http://download.java.net/jdk9/docs/technotes/guides/security/jgss/jgss-api-mechanism.html. In "Supported krb5.conf Settings":

      1. Update "In Java SE 7" to "In Java SE 9".

      2. Prepend the following 2 lines before "[libdefaults]":

        include FILENAME
        includedir DIRNAME

      3. Add 3 new lines at the end of the "[libdefaults]" section:

        max_retries =
        renew_lifetime =
        ticket_lifetime =

      4. Update the "[realms]" section to

        [realms]
          REALM.NAME = {
            kdc =
            kdc_timeout =
            udp_preference_limit =
            max_retries =
          }

      5. In the default values part, update these values:

         udp_preference_limit from -1 to "1465 (-1 in JDK 7)"
         kdc_timeout from "30000" to "30s (30000 in JDK 7)"
         dns_lookup_realm from true to false, and remove the "(false in JDK 6)" words
         

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                schannagirip Sahana Channagiri Prabhakar (Inactive)
                Reporter:
                weijun Weijun Wang
              • Votes:
                0 Vote for this issue
                Watchers:
                2 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: