RFR 8014870: Faster KDC availability check in Kerberos

[Wang Weijun]

On Jul 8, 2014, at 17:20, Michael-O <1983-01-06 at gmx.net> wrote:

> Hi Max,
> 
> are you going to backport this to Java 7?

I would be glad to do that. But now I still cannot find anyone code reviewing it for JDK 9.

> We are suffering from this on a regular basis because several KDCs are faulty returned by DNS SRVs. 30 s is not acceptable. Moreover, why is the property krb5.kdc.bad.policy not documented publicly?

Sorry, we didn't have a good place to document krb5-related things. The Java SE document always focuses on GSS-API. I think it was mentioned in release notes of JDK 7.

We have http://docs.oracle.com/javase/8/docs/technotes/guides/security/jgss/jgss-api-mechanism.html now and hopefully we can put some useful information there.

Thanks
Max

> 
> Thanks,
> 
> Michael