Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8004488

wrong permissions checked in krb5

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • P4
    • 8
    • 7u79, 7u80, 7u85, 8
    • security-libs
    • None
    • 7
    • b69
    • Verified

    Backports

      Description

        In JAAS, PrivateCredentialPermissions are needed to read various kinds of private credentials. For krb5, they are normally for KerberosTicket, KerberosKey and KeyTab classes. However, JDK 7 stores a special kind of sun.security.jgss.krb5.Krb5Util$KeysFromKeyTab objects which is not covered by the normal permissions.

        Attachments

          Issue Links

            backported by

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8043932 wrong permissions checked in krb5

            • P4 - Minor loss of function, or other problem where easy workaround is present.
            • Resolved

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8072303 wrong permissions checked in krb5

            • P4 - Minor loss of function, or other problem where easy workaround is present.
            • Resolved
            relates to

            Bug - A problem which impairs or prevents the functions of the product. JDK-8144971 NPE in OSB KerberosAuthenticator after upgrade to JDK 1.7.0_80

            • P3 - Major loss of function.
            • Closed

            Bug - A problem which impairs or prevents the functions of the product. JDK-8165668 Kerberos Keys stored in a keytab are no longer used/read in JGSS accept

            • P3 - Major loss of function.
            • Closed

            Activity

              People

                weijun Weijun Wang
                weijun Weijun Wang
                Votes:
                0 Vote for this issue
                Watchers:
                5 Start watching this issue

                Dates

                  Created:
                  Updated:
                  Resolved: