Loading...

XML

Word

Printable

Type: Enhancement
Resolution: Fixed
Priority: P4
Fix Version/s: 13
Affects Version/s: 8, 11, 13
Component/s: security-libs
Labels:

Subcomponent:
org.ietf.jgss:krb5
Resolved In Build:
b25
CPU:

generic
OS:

generic

Issue	Fix Version	Assignee	Priority	Status	Resolution	Resolved In Build
JDK-8226010	14	Martin Balao Alonso	P4	Resolved	Fixed	team
JDK-8242091	11.0.9-oracle	Ravi Reddy	P4	Resolved	Fixed	b01
JDK-8230495	11.0.6	Martin Balao Alonso	P4	Resolved	Fixed	b02
JDK-8233511	openjdk8u252	Martin Balao Alonso	P4	Closed	Duplicate	b03
JDK-8237152	openjdk8u242	Martin Balao Alonso	P4	Resolved	Fixed	b07
JDK-8242093	8u271	Ravi Reddy	P4	Resolved	Fixed	b01
JDK-8251745	emb-8u271	Ravi Reddy	P4	Resolved	Fixed	team

The goal of this enhancement is to support Kerberos cross-realm referrals in OpenJDK's client, according to RFC 6806 [1].

This enhancement includes support of:

* Canonicalize flag and NT-ENTERPRISE principals in AS requests
* Client referrals (AS requests)
* Server referrals (TGS requests)
* FAST - RFC 6806 Section 11
* Referrals cache

--
[1] - https://tools.ietf.org/html/rfc6806.html

backported by

JDK-8226010 Support Kerberos cross-realm referrals (RFC 6806)

Resolved

JDK-8230495 Support Kerberos cross-realm referrals (RFC 6806)

Resolved

JDK-8237152 Support Kerberos cross-realm referrals (RFC 6806)

Resolved

JDK-8242091 Support Kerberos cross-realm referrals (RFC 6806)

Resolved

JDK-8242093 Support Kerberos cross-realm referrals (RFC 6806)

Resolved

JDK-8251745 Support Kerberos cross-realm referrals (RFC 6806)

Resolved

JDK-8233511 Support Kerberos cross-realm referrals (RFC 6806)

Closed

csr for

JDK-8223172 Support Kerberos cross-realm referrals (RFC 6806)

Closed

duplicates

JDK-6631053 Support canonicalize in Kerberos configuration file

Closed

JDK-8237647 LoginException: Message stream modified (41) for uppercase username with krb5

Closed

relates to

JDK-8227061 KDC.java test behaves incorrectly when AS-REQ contains a PAData not PA-ENC-TS-ENC

Resolved

JDK-8227437 S4U2proxy cannot continue because server's TGT cannot be found

Closed

JDK-8233946 Add @since 13 annotation to KerberosPrincipal.KRB_NT_ENTERPRISE field

Closed

JDK-8250582 Revert Principal Name type to NT-UNKNOWN when requesting TGS Kerberos tickets

Resolved

JDK-8227381 GSS login fails with PREAUTH_FAILED

Resolved

JDK-8226719 Kerberos login to Windows 2000 failed with "Inappropriate type of checksum in message"

Closed

JDK-8246193 Possible NPE in ENC-PA-REP search in AS-REQ

Closed

JDK-8273894 ConcurrentModificationException raised every time ReferralsCache drops referral

Closed

(2 backported by, 1 csr for, 2 duplicates, 8 relates to)

There are no Sub-Tasks for this issue.

Assignee:: Martin Balao Alonso

Reporter:: Martin Balao Alonso

Votes:: 0 Vote for this issue

Watchers:: 7 Start watching this issue

Created:: 2018-12-07 12:13

Updated:: 2021-09-22 04:06

Resolved:: 2019-06-06 08:00

Details

Backports

Description

Attachments

Issue Links

Sub-Tasks

Activity

People

Dates