Fwd: CR 6972005 Created, P4 jgss/krb5plugin ConfPlusProp.java test failure when DNS has info for realm
Weijun Wang
Weijun.Wang at Sun.COM
Mon Jul 26 06:04:44 UTC 2010
Hi Xuelei
A regression in test:
*Change Request ID*: 6972005
*Synopsis*: ConfPlusProp.java test failure when DNS has info for realm
webrev:
http://cr.openjdk.java.net/~weijun/6972005/webrev.00/
Thanks
Max
=== *Description*
============================================================
The ConfPlusProp.java test checks if the default realm is null when it's
not specified in krb5.conf. However, after 6969292, Kerberos can get
default realm from DNS. The test fails.
*** (#1 of 1): 2010-07-26 05:55:28 GMT+00:00 weijun.wang at sun.com
=== *Evaluation*
=============================================================
There are several places in the test to check if default realm is null.
In the first two cases, a krb5.conf exists, we can add dns_lookup_realm
= false there. In the 3rd case, there's no krb5.conf, and we have to
ignore the check.
*** (#1 of 1): 2010-07-26 05:55:29 GMT+00:00 weijun.wang at sun.com
*** Last Edit: 2010-07-26 05:56:42 GMT+00:00 weijun.wang at sun.com
Thanks
Max
More information about the security-dev
mailing list