-
Bug
-
Resolution: Fixed
-
P3
-
5.0u11
-
b100
-
x86
-
windows_2008
-
Verified
Issue | Fix Version | Assignee | Priority | Status | Resolution | Resolved In Build |
---|---|---|---|---|---|---|
JDK-2194170 | 6u25 | Robert Mckenna | P2 | Closed | Fixed | b02 |
JDK-2194171 | 5.0u29 | Robert Mckenna | P3 | Resolved | Fixed | b01 |
When CU application tries user authentification in com.sun.security.auth.module.Krb5LoginModule,
that fails under the following condition.
- Under Windows Server 2008 or Windows Server 2008 R2
- When ActiveDirectory is constructed, the domain functional level is set to 2000 or 2003.
- The client side of Kerberos uses Krb5LoginModule in jdk5u11.
- The setting of Kerberos enctypes is set to default value.(Not to specify any value explicitly)
REPRODUCE:
1) To set jaaskrb.conf and krb5.conf to c:\tmp\
2) To open krb5.conf and change the inf. of default_realm and [realms] to
inf. of the authentification server.
3) To Execute KrbSample.java and input user name and password
that fails under the following condition.
- Under Windows Server 2008 or Windows Server 2008 R2
- When ActiveDirectory is constructed, the domain functional level is set to 2000 or 2003.
- The client side of Kerberos uses Krb5LoginModule in jdk5u11.
- The setting of Kerberos enctypes is set to default value.(Not to specify any value explicitly)
REPRODUCE:
1) To set jaaskrb.conf and krb5.conf to c:\tmp\
2) To open krb5.conf and change the inf. of default_realm and [realms] to
inf. of the authentification server.
3) To Execute KrbSample.java and input user name and password
- backported by
-
JDK-2194171 kerberos login failure on win2008 with AD set to win2000 compat mode
-
- Resolved
-
-
JDK-2194170 kerberos login failure on win2008 with AD set to win2000 compat mode
-
- Closed
-
- relates to
-
JDK-6959292 regression: cannot login if session key and preauth does not use the same etype
-
- Closed
-
-
JDK-6932525 Incorrect encryption types of KDC_REQ_BODY of AS-REQ with pre-authentication
-
- Closed
-