-
Type:
Enhancement
-
Resolution: Fixed
-
Priority:
P4
-
Affects Version/s: None
-
Component/s: security-libs
At present, the comparison of principal names during ccache or keytab entry lookup is case-insensitive. This approach aims to maintain interoperability with certain Kerberos 5 implementations. However, many Kerberos 5 implementations consider principal names to be case-sensitive. Consequently, if two services have names that differ only in case, there is a risk that an incorrect keytab entry might be selected for authentication. A similar issue could arise during ccache entry lookup.
- csr for
-
JDK-8331976 Enable case-sensitive check in ccache and keytab entry lookup
-
- Closed
-