JGSS fails with KrbException: Message stream modified (41) on cross-realm intermediate/unexpected TGT

Wang Weijun weijun.wang at oracle.com
Wed Apr 20 03:01:10 UTC 2016

> On Apr 20, 2016, at 4:35 AM, Osipov, Michael <michael.osipov at siemens.com> wrote:
>> It has not listed RFC 6806.
> Exactly, that's the RFC I am talking about. Thank you for bringing this up.
> People once in while ask for client referrals on Stack Overflow [3], I'd
> rather see server referrals. Anyway, if you think that you or someone else
> will pick up this RFC, I'd be more than happy to test that. I have three
> forests, tens of domains to test and thousands of SPNs to test.

Thanks in advance.

Once we decide to do this, we will file a JEP.


> Michael
> [1] http://mail.openjdk.java.net/pipermail/core-libs-dev/2016-April/040347.html
> [2] http://tomcatspnegoad.sf.net/referral-handling
> [3] http://stackoverflow.com/q/34398114/696632

More information about the security-dev mailing list