[security-dev 00679]: Re: Review request: Infinite loop if SPNEGO specified as sun.security.jgss.mechanism

[Max (Weijun) Wang]

On Mar 5, 2009, at 4:41 PM, Xuelei Fan wrote:

> "sun.security.jgss.mechanism", it is a undocumented property, right?  
> I think it is hard to explain why SPNEGO is request, but  KRB5  
> given, it is not the expected behavior. Why not thrown a GSSException?

No, user sets this property so that SPNEGO is her default JGSS mech,  
that does not mean she wants SPNEGO to use SPNEGO as the underlying  
mech.

As Valerie replied in the other mail, I should put the fix all inside  
SpNegoMechFactory. Working on it now.

Thanks
Max

> Andrew
>
> Weijun Wang wrote:
>> Hi Andrew or Valerie
>>
>> Please take a review at this bug fix:
>>
>>   http://cr.openjdk.java.net/~weijun/6770883/webrev.01/
>>   http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=6770883
>>
>> Basically. Since SPNEGO is a pseudo-mech that's meant to negotiate a
>> real concrete mech, SPNEGO itself cannot be used as the underlying
>> default mech under.
>>
>> Thanks
>> Max
>>
>