Summary

Reimplement Kerberos-related debugging with the sun.security.util.Debug utility class.

Problem

We are currently enhancing the sun.security.util.Debug class to add more informations on caller name, thread info, and timestamp. It will be nice to extend this function to the debugging code in JGSS/Kerberos.

Currently, JGSS/Kerberos debugging is independent of other security areas, and when enabled, it simply calls System.out.println and the output format is very primitive.

Solution

Reimplement JGSS/Kerberos debugging using the sun.security.util.Debug utility class. Note that the debugging is still enabled by the existing mechanisms. For example, the debug option in a Krb5LoginModule JAAS config entry, or dedicated system properties like sun.security.krb5.debug. There is no current plan to use the java.security.debug property to enable debugging in this area.

Specification

No spec change.