-
Enhancement
-
Resolution: Not an Issue
-
P4
-
None
-
5.0
-
x86
-
linux
A DESCRIPTION OF THE REQUEST :
Kerberos login module (JAAS) when told to acquire kerberos ticket from
cache (useTicketCache=true option) tries to get it from
/tmp/krb5cc_<uid>
Unfortuantely in many Linux distrubutions tickets acquired via PAM
(pluggable authentication module) are stored in
/tmp/krb5cc_<uid>_<some_random_hex_number>.
Environment variable KRB5CCNAME is set to point to such a file.
All Kerberos utilities (including those on Solaris) take this variable to locate
ticket cache, only if it is absent they revert to default /tmp/krb5cc_<uid>
The fix would have to be applied in
sun.security.krb5.internal.ccache.FileCredentialsCache
JUSTIFICATION :
Without this fix one is forced to pretty weird workarounds with generating JAAS
configuration files to point to the correct cache (ticketCache=....)
All Kerberos utilities use KRB5CCNAME, Java should not be an exception.
CUSTOMER SUBMITTED WORKAROUND :
use ticketCache= JAAS configuration to point to correct cache file
###@###.### 2004-12-23 11:03:50 GMT
Kerberos login module (JAAS) when told to acquire kerberos ticket from
cache (useTicketCache=true option) tries to get it from
/tmp/krb5cc_<uid>
Unfortuantely in many Linux distrubutions tickets acquired via PAM
(pluggable authentication module) are stored in
/tmp/krb5cc_<uid>_<some_random_hex_number>.
Environment variable KRB5CCNAME is set to point to such a file.
All Kerberos utilities (including those on Solaris) take this variable to locate
ticket cache, only if it is absent they revert to default /tmp/krb5cc_<uid>
The fix would have to be applied in
sun.security.krb5.internal.ccache.FileCredentialsCache
JUSTIFICATION :
Without this fix one is forced to pretty weird workarounds with generating JAAS
configuration files to point to the correct cache (ticketCache=....)
All Kerberos utilities use KRB5CCNAME, Java should not be an exception.
CUSTOMER SUBMITTED WORKAROUND :
use ticketCache= JAAS configuration to point to correct cache file
###@###.### 2004-12-23 11:03:50 GMT