Code review request: 7043737: klist does not detect non-existing keytab

Weijun Wang weijun.wang at oracle.com
Wed May 11 07:35:11 UTC 2011


Hi Valerie

http://cr.openjdk.java.net/~weijun/7043737/webrev.00/

Not only a missing keytab is detected, but also an invalid one, where I 
use a similar error message like the native klist:

$ klist -k ASSEMBLY_EXCEPTION
Keytab name: WRFILE:ASSEMBLY_EXCEPTION
klist: Unsupported key table format version number while starting keytab 
scan

I'll ask for JDK 7 approval for this bug.

Thanks
Max


-------- Original Message --------
*Change Request ID*: 7043737
*Synopsis*: klist does not detect non-existing keytab

=== *Description* 
============================================================
Since "6894072: always refresh keytab", we support "dynamic" keytabs 
which means a keytab file can change during the execution of a program, 
this even includes accepting a non-existing keytab at the beginning and 
read it when it appears at a later time.

On the other hand, the klist tool is used to list the current content of 
a static keytab file. When the file does not exist, we should warn the 
user. This behavior is also consistent with klist from other vendors.




More information about the security-dev mailing list