OpenJDK krb5 ignore /etc/krb5.conf?

Weijun Wang weijun.wang at oracle.com
Thu Jul 5 01:34:28 PDT 2012


Hi Scott

On Mac since Lion, sun.security.krb5.Config tries to locate the config 
info in this order:

1. java.security.krb5.conf system property
2. ${jre}/lib/security/krb5.conf
3. SCDynamicStoreConfig

The main difference from other platforms is that it will not try config 
files, say, /Library/Preferences/edu.mit.Kerberos or /etc/krb5.conf.

On the other hand, even /usr/bin/kinit comes with Lion reads the config 
file (if there is no SCDynamicStoreConfig setting).

Is there a special reason for the current Java behavior? I do notice 
that the Apple 6u33 already does this.

Thanks
Max



More information about the security-dev mailing list