Fwd: CR 6972005 Created, P4 jgss/krb5plugin ConfPlusProp.java test failure when DNS has info for realm

Weijun Wang Weijun.Wang at Sun.COM
Mon Jul 26 06:04:44 UTC 2010


Hi Xuelei

A regression in test:

*Change Request ID*: 6972005
*Synopsis*: ConfPlusProp.java test failure when DNS has info for realm

webrev:
http://cr.openjdk.java.net/~weijun/6972005/webrev.00/

Thanks
Max

=== *Description* 
============================================================
The ConfPlusProp.java test checks if the default realm is null when it's 
not specified in krb5.conf. However, after 6969292, Kerberos can get 
default realm from DNS. The test fails.

*** (#1 of 1): 2010-07-26 05:55:28 GMT+00:00 weijun.wang at sun.com

=== *Evaluation* 
=============================================================
There are several places in the test to check if default realm is null.

In the first two cases, a krb5.conf exists, we can add dns_lookup_realm 
= false there. In the 3rd case, there's no krb5.conf, and we have to 
ignore the check.

*** (#1 of 1): 2010-07-26 05:55:29 GMT+00:00 weijun.wang at sun.com
*** Last Edit: 2010-07-26 05:56:42 GMT+00:00 weijun.wang at sun.com

Thanks
Max




More information about the security-dev mailing list