Patching bug 6722928/serious limitations of JGSS under Windows 7

1983-01-06 at gmx.net 1983-01-06 at gmx.net
Tue Aug 14 09:14:07 UTC 2012


Hi folks,

like many many other developers I have switched to Windows 7 on my machine. After hours of search I have realized that JGSS is seriously crippled due to UAC, account permissions and LSA's limitations.

I have found the ticket 6722928 which has been filed more than 4 years ago. Suprisingly, Weijun Wang has already provided a very good patch [1] and nothing has happened since 2010.

The current situation of Kerberos in Java on Windows 7 is very frustating from an enterprise point of view. I am convinced that I speak for the vast majority of devs and users who want to have native SSPI support on Windows with tampering with the registry, cred caches, ini files. Most even can't do because group policies don't allow it. Fortunately I can but since I am a local admin with a domain account, I am crippled too.

Is there anything happening from the OpenJDK folks (Oracle JDK devs) for fix that issue anytime soon? This would bring the great Java platform on par with .NET's support of GSS-API/SSPI on Windows.

Yours,

Michael Osipov

[1] http://cr.openjdk.java.net/~weijun/6722928/webrev.00/jdk.patch



More information about the security-dev mailing list