Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-6722928

Provide a default native GSS-API library on Windows

    XMLWordPrintable

Details

    • b25
    • generic
    • windows

    Backports

      Description

        SSPI is the MS dialect of GSSAPI. We should support it in JDK on the Windows platform for better interop and system integration with Windows AD. Possible benefits are:

        1. No need for krb5.ini and JAAS config
        2. No need to retrieve TGT, thus no need for the allowtgtsessionkey registry key
        3. Override the restriction when client is a member of local admin group
        4. Server side program has no need to run setspn/ktpass
        5. Server side program may be run as a Windows service
        6. In Windows Server 2008, user2user authentication must be performed through their new protocol (http://tools.ietf.org/html/draft-swift-win2k-krb-user2user-03). SSPI automatically does this.

        In the first stage, we should support client side using default credentials.

        This provider must be interoperable with Java GSS provider and other native providers.

        Attachments

          Issue Links

            backported by

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8226104 Provide a default native GSS-API library on Windows

            • P3 - Major loss of function.
            • Resolved

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8234694 Provide a default native GSS-API library on Windows

            • P3 - Major loss of function.
            • Resolved

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8312050 Provide a default native GSS-API library on Windows

            • P3 - Major loss of function.
            • Resolved
            csr for

            CSR - null JDK-8210801 Provide a default native GSS-API library on Windows

            • P3 - Major loss of function.
            • Closed
            duplicates

            Enhancement - null JDK-8161921 Windows 10 Credential Guard does not allow sharing of TGT with Java

            • P2 - Crashes, loss of data, severe memory leak.
            • Closed

            Enhancement - null JDK-8054026 Java requires AllowTGTSessionKey = 1 for Kerberos SSO to work

            • P4 - Minor loss of function, or other problem where easy workaround is present.
            • Closed
            relates to

            Bug - A problem which impairs or prevents the functions of the product. JDK-8225687 Newly added sspi.cpp in JDK-6722928 still contains some small errors

            • P3 - Major loss of function.
            • Resolved

            Bug - A problem which impairs or prevents the functions of the product. JDK-8290920 sspi_bridge.dll not built if BUILD_CRYPTO is false

            • P3 - Major loss of function.
            • Resolved

            Bug - A problem which impairs or prevents the functions of the product. JDK-8280401 [sspi] gss_accept_sec_context leaves output_token uninitialized

            • P4 - Minor loss of function, or other problem where easy workaround is present.
            • Resolved

            Enhancement - null JDK-8208299 Provide a way to clear NegotiateAuthentication cache

            • P4 - Minor loss of function, or other problem where easy workaround is present.
            • Open

            Enhancement - null JDK-8200468 Port the native GSS-API bridge to Windows

            • P4 - Minor loss of function, or other problem where easy workaround is present.
            • Resolved

            Bug - A problem which impairs or prevents the functions of the product. JDK-8230910 libsspi_bridge does not build on Windows 32bit

            • P4 - Minor loss of function, or other problem where easy workaround is present.
            • Resolved

            Enhancement - null JDK-8161921 Windows 10 Credential Guard does not allow sharing of TGT with Java

            • P2 - Crashes, loss of data, severe memory leak.
            • Closed

            JEP - Java Enhancement Proposal JDK-8199569 Client-side GSS-API Library for Windows SSPI

            • P3 - Major loss of function.
            • Closed
            links to

            Commit Commit openjdk/jdk8u-dev/5f62e559

            Review Review openjdk/jdk8u-dev/340

            There are no Sub-Tasks for this issue.

            Activity

              People

                weijun Weijun Wang
                weijun Weijun Wang
                Votes:
                1 Vote for this issue
                Watchers:
                12 Start watching this issue

                Dates

                  Created:
                  Updated:
                  Resolved:
                  Imported:
                  Indexed: