-
Enhancement
-
Resolution: Duplicate
-
P4
-
None
-
5.0
-
x86
-
windows_xp
A DESCRIPTION OF THE REQUEST :
The current mechaniosm used to locate KDCs is not flexible enough for large dynamic environments. Some systems (win2k for example) use DNS to locate KDCs. The current implementation allows either a list of KDC to be given in a system property or a krb5.conf file to be read.
A better solution would be to define a Krb5ConfigProvider interface and to allow an app to set a system propery specifying the class of the concrete provider. This provider can then resolve KDC addresses dynamically
JUSTIFICATION :
Want to use GSS/JAAS/Krb5 in win2k environment
The current mechaniosm used to locate KDCs is not flexible enough for large dynamic environments. Some systems (win2k for example) use DNS to locate KDCs. The current implementation allows either a list of KDC to be given in a system property or a krb5.conf file to be read.
A better solution would be to define a Krb5ConfigProvider interface and to allow an app to set a system propery specifying the class of the concrete provider. This provider can then resolve KDC addresses dynamically
JUSTIFICATION :
Want to use GSS/JAAS/Krb5 in win2k environment
- duplicates
-
JDK-4814940 Use DNS for Kerberos realm configuration
-
- Closed
-