Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-6951366

kerberos login failure on win2008 with AD set to win2000 compat mode

    XMLWordPrintable

Details

    • b100
    • x86
    • windows_2008
    • Verified

    Backports

      Description

        When CU application tries user authentification in com.sun.security.auth.module.Krb5LoginModule,
        that fails under the following condition.

        - Under Windows Server 2008 or Windows Server 2008 R2
        - When ActiveDirectory is constructed, the domain functional level is set to 2000 or 2003.
        - The client side of Kerberos uses Krb5LoginModule in jdk5u11.
        - The setting of Kerberos enctypes is set to default value.(Not to specify any value explicitly)

        REPRODUCE:
        1) To set jaaskrb.conf and krb5.conf to c:\tmp\
        2) To open krb5.conf and change the inf. of default_realm and [realms] to
           inf. of the authentification server.
        3) To Execute KrbSample.java and input user name and password

        Attachments

          Issue Links

            Activity

              People

                weijun Weijun Wang
                tbaba Tadayuki Baba (Inactive)
                Votes:
                0 Vote for this issue
                Watchers:
                1 Start watching this issue

                Dates

                  Created:
                  Updated:
                  Resolved:
                  Imported:
                  Indexed: