[jboss-jira] [JBoss JIRA] (ELY-1565) local-kerberos can be removed/deprecated from authentication client
Jan Kalina (JIRA)
issues at jboss.org
Fri Apr 20 09:52:00 EDT 2018
[ https://issues.jboss.org/browse/ELY-1565?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Jan Kalina updated ELY-1565:
----------------------------
Description:
As described in ELY-1541, obtaining GSSCredential using local-kerberos is redundant.
If not credential is provided, GSS based authentication mechanims will obtain it hiself.
When credential is not provided, kerberos-based mechanism will obtain appropriate GSSCredential from ccache himself.
Note on both, Oracle [1] and IBM JDK [2] can be path to the ccache defined using {{KRB5CCNAME}} environment variable - no need to set any JAAS login options for obtaining.
[1] https://bugs.openjdk.java.net/browse/JDK-6832353
[2] https://www.ibm.com/support/knowledgecenter/en/SSYKE2_9.0.0/com.ibm.java.multiplatform.90.doc/user/compsec_jgss_kerberos.html
was:
As described in ELY-1541, obtaining GSSCredential using local-kerberos is redundant.
If not credential is provided, GSS based authentication mechanims will obtain it hiself.
> local-kerberos can be removed/deprecated from authentication client
> -------------------------------------------------------------------
>
> Key: ELY-1565
> URL: https://issues.jboss.org/browse/ELY-1565
> Project: WildFly Elytron
> Issue Type: Task
> Affects Versions: 1.2.4.Final
> Reporter: Jan Kalina
> Assignee: Jan Kalina
>
> As described in ELY-1541, obtaining GSSCredential using local-kerberos is redundant.
> If not credential is provided, GSS based authentication mechanims will obtain it hiself.
> When credential is not provided, kerberos-based mechanism will obtain appropriate GSSCredential from ccache himself.
> Note on both, Oracle [1] and IBM JDK [2] can be path to the ccache defined using {{KRB5CCNAME}} environment variable - no need to set any JAAS login options for obtaining.
> [1] https://bugs.openjdk.java.net/browse/JDK-6832353
> [2] https://www.ibm.com/support/knowledgecenter/en/SSYKE2_9.0.0/com.ibm.java.multiplatform.90.doc/user/compsec_jgss_kerberos.html
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)
More information about the jboss-jira
mailing list