Code review request: 8012615: Realm.getRealmsList returns realms list in wrong
Weijun Wang
weijun.wang at oracle.com
Wed Sep 4 12:24:05 UTC 2013
Hi Valerie
Webrev updated:
http://cr.openjdk.java.net/~weijun/8012615/webrev.02
Except for some comment, the only real source change is in
Realm::parseCapaths:
- if (!cfg.exists("capaths", cRealm)) {
+ if (!cfg.exists("capaths", cRealm, sRealm)) {
throw new KrbException("No conf");
}
So this means only when both the sub-section and key exist, capaths is
used. Otherwise, hierarchy is used. This is to be consistent with MIT
krb5 style.
So a test case is also updated, for
C1.COM = {
C3.COM = C2.COM
}
The path from C1.COM to C2.COM is no longer C1.COM->C2.COM, but
C1.COM->COM->C2.COM.
Thanks
Max
More information about the security-dev
mailing list