Fwd: CR 6972005 Created, P4 jgss/krb5plugin ConfPlusProp.java test failure when DNS has info for realm

Xuelei Fan Xuelei.Fan at Sun.COM
Mon Jul 26 01:59:08 PDT 2010


looks fine to me.

Xuelei

On 7/26/2010 2:04 PM, Weijun Wang wrote:
> Hi Xuelei
> 
> A regression in test:
> 
> *Change Request ID*: 6972005
> *Synopsis*: ConfPlusProp.java test failure when DNS has info for realm
> 
> webrev:
> http://cr.openjdk.java.net/~weijun/6972005/webrev.00/
> 
> Thanks
> Max
> 
> === *Description*
> ============================================================
> The ConfPlusProp.java test checks if the default realm is null when it's
> not specified in krb5.conf. However, after 6969292, Kerberos can get
> default realm from DNS. The test fails.
> 
> *** (#1 of 1): 2010-07-26 05:55:28 GMT+00:00 weijun.wang at sun.com
> 
> === *Evaluation*
> =============================================================
> There are several places in the test to check if default realm is null.
> 
> In the first two cases, a krb5.conf exists, we can add dns_lookup_realm
> = false there. In the 3rd case, there's no krb5.conf, and we have to
> ignore the check.
> 
> *** (#1 of 1): 2010-07-26 05:55:29 GMT+00:00 weijun.wang at sun.com
> *** Last Edit: 2010-07-26 05:56:42 GMT+00:00 weijun.wang at sun.com
> 
> Thanks
> Max
> 




More information about the security-dev mailing list