S4U2Self and OpenJDK 8

Wang Weijun weijun.wang at oracle.com
Wed Dec 2 00:51:38 UTC 2015


> On Dec 2, 2015, at 1:59 AM, Marc Boorshtein <marc.boorshtein at tremolosecurity.com> wrote:
> 
> Max,
> 
> Closing the loop on this.  It turns out that there was an extra step
> needed to get the user in freeipa setup as a delegate (the
> documentation was written for S4U2Proxy, not S4U2Self).  Once I set
> that flag delegation started working for BOTH Java 8 and Java 9.

Nice to hear this. I'll lower the priority of https://bugs.openjdk.java.net/browse/JDK-8144288 then.

--Max

> 
> Thanks again.
> Marc Boorshtein
> CTO Tremolo Security
> marc.boorshtein at tremolosecurity.com
> (703) 828-4902



More information about the security-dev mailing list