Details
-
Enhancement
-
Resolution: Fixed
-
P3
-
7, 8, 11
-
b25
-
generic
-
windows
Backports
Issue | Fix Version | Assignee | Priority | Status | Resolution | Resolved In Build |
---|---|---|---|---|---|---|
JDK-8226104 | 14 | Weijun Wang | P3 | Resolved | Fixed | team |
JDK-8234694 | 11.0.10 | Martin Balao | P3 | Resolved | Fixed | b05 |
JDK-8312050 | openjdk8u392 | Alexey Bakhtin | P3 | Resolved | Fixed | b02 |
Description
1. No need for krb5.ini and JAAS config
2. No need to retrieve TGT, thus no need for the allowtgtsessionkey registry key
3. Override the restriction when client is a member of local admin group
4. Server side program has no need to run setspn/ktpass
5. Server side program may be run as a Windows service
6. In Windows Server 2008, user2user authentication must be performed through their new protocol (http://tools.ietf.org/html/draft-swift-win2k-krb-user2user-03). SSPI automatically does this.
In the first stage, we should support client side using default credentials.
This provider must be interoperable with Java GSS provider and other native providers.
Attachments
Issue Links
- backported by
-
JDK-8226104 Provide a default native GSS-API library on Windows
- Resolved
-
JDK-8234694 Provide a default native GSS-API library on Windows
- Resolved
-
JDK-8312050 Provide a default native GSS-API library on Windows
- Resolved
- csr for
-
JDK-8210801 Provide a default native GSS-API library on Windows
- Closed
- duplicates
-
JDK-8161921 Windows 10 Credential Guard does not allow sharing of TGT with Java
- Closed
-
JDK-8054026 Java requires AllowTGTSessionKey = 1 for Kerberos SSO to work
- Closed
- relates to
-
JDK-8225687 Newly added sspi.cpp in JDK-6722928 still contains some small errors
- Resolved
-
JDK-8290920 sspi_bridge.dll not built if BUILD_CRYPTO is false
- Resolved
-
JDK-8280401 [sspi] gss_accept_sec_context leaves output_token uninitialized
- Resolved
-
JDK-8208299 Provide a way to clear NegotiateAuthentication cache
- Open
-
JDK-8200468 Port the native GSS-API bridge to Windows
- Resolved
-
JDK-8230910 libsspi_bridge does not build on Windows 32bit
- Resolved
-
JDK-8161921 Windows 10 Credential Guard does not allow sharing of TGT with Java
- Closed
-
JDK-8199569 Client-side GSS-API Library for Windows SSPI
- Closed