OpenJDK krb5 ignore /etc/krb5.conf?

Weijun Wang at
Thu Jul 5 01:34:28 PDT 2012

Hi Scott

On Mac since Lion, tries to locate the config 
info in this order:

1. system property
2. ${jre}/lib/security/krb5.conf
3. SCDynamicStoreConfig

The main difference from other platforms is that it will not try config 
files, say, /Library/Preferences/ or /etc/krb5.conf.

On the other hand, even /usr/bin/kinit comes with Lion reads the config 
file (if there is no SCDynamicStoreConfig setting).

Is there a special reason for the current Java behavior? I do notice 
that the Apple 6u33 already does this.


More information about the security-dev mailing list