Code review request: 8012615: Realm.getRealmsList returns realms list in wrong

Weijun Wang weijun.wang at oracle.com
Wed Sep 4 12:24:05 UTC 2013


Hi Valerie

Webrev updated:

   http://cr.openjdk.java.net/~weijun/8012615/webrev.02

Except for some comment, the only real source change is in 
Realm::parseCapaths:

-        if (!cfg.exists("capaths", cRealm)) {
+        if (!cfg.exists("capaths", cRealm, sRealm)) {
              throw new KrbException("No conf");
          }

So this means only when both the sub-section and key exist, capaths is 
used. Otherwise, hierarchy is used. This is to be consistent with MIT 
krb5 style.

So a test case is also updated, for

    C1.COM = {
        C3.COM = C2.COM
    }

The path from C1.COM to C2.COM is no longer C1.COM->C2.COM, but 
C1.COM->COM->C2.COM.

Thanks
Max




More information about the security-dev mailing list