Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-6212134

kerberos native credential cache ignores KRB5CCNAME environment variable

XMLWordPrintable

    • Icon: Enhancement Enhancement
    • Resolution: Not an Issue
    • Icon: P4 P4
    • None
    • 5.0
    • security-libs

      A DESCRIPTION OF THE REQUEST :
      Kerberos login module (JAAS) when told to acquire kerberos ticket from
      cache (useTicketCache=true option) tries to get it from
      /tmp/krb5cc_<uid>

      Unfortuantely in many Linux distrubutions tickets acquired via PAM
      (pluggable authentication module) are stored in
      /tmp/krb5cc_<uid>_<some_random_hex_number>.

      Environment variable KRB5CCNAME is set to point to such a file.
      All Kerberos utilities (including those on Solaris) take this variable to locate
      ticket cache, only if it is absent they revert to default /tmp/krb5cc_<uid>

      The fix would have to be applied in
      sun.security.krb5.internal.ccache.FileCredentialsCache

      JUSTIFICATION :
      Without this fix one is forced to pretty weird workarounds with generating JAAS
      configuration files to point to the correct cache (ticketCache=....)
      All Kerberos utilities use KRB5CCNAME, Java should not be an exception.


      CUSTOMER SUBMITTED WORKAROUND :
      use ticketCache= JAAS configuration to point to correct cache file
      ###@###.### 2004-12-23 11:03:50 GMT

            smalkanisunw Seema Malkani (Inactive)
            jssunw Jitender S (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

              Created:
              Updated:
              Resolved:
              Imported:
              Indexed: