RFR 8077102: dns_lookup_realm should be false by default

Valerie Peng valerie.peng at oracle.com
Thu May 14 00:27:56 UTC 2015


Changes look fine.
Thanks,
Valerie

On 5/13/2015 7:16 AM, Weijun Wang wrote:
> Hi All
>
> Please take a look at
>
>    http://cr.openjdk.java.net/~weijun/8077102/webrev.00/
>
> Before this fix, dns_lookup_realm true is by default. This is not 
> consistent with other krb5 vendors. It also leads to lot of time waste 
> when Kerberos 5 is not configured at all.
>
> The no-krb5.conf test case in ConfPlusProp.java is removed because 
> with dns_lookup_kdc still being true by default, the test can timeout 
> on some systems.
>
> Thanks
> Max



More information about the security-dev mailing list