Details

    • Type: Enhancement
    • Status: Open
    • Priority: P4
    • Resolution: Unresolved
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: security-libs
    • Labels:
      None

      Description

      Naturally, Krb5LoginModule is not appropriate when using the native C GSS-API library. That makes the non-existence of GssLoginModule a bug when using the native C GSS-API library.

      Arguably, JAAS's continued existence in a world without applets is a bug! I would prefer JAAS be removed, but there is a great deal of cargo-culted JAAS-using application code out there that will not go away anytime soon, so at the very least stub classes and methods would have to stay behind.

      This commit adds a GssLoginModule that is almost a complete replacement for Krb5LoginModule.

      Missing functionality to make it a complete replacement of Krb5LoginModule:

         - kinit with key (maps to gss_acquire_cred_from())
         - kinit with keytab (maps to gss_acquire_cred_from())

        Attachments

          Activity

            People

            • Assignee:
              nwilliams Nicolas Williams
              Reporter:
              weijun Weijun Wang
            • Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated: