RFR 8200468: Port the native GSS-API bridge to Windows
Valerie Peng
valerie.peng at oracle.com
Fri Apr 13 01:09:18 UTC 2018
Hi Max,
Changes look fine, just some very minor nit: Maybe it's better to remove
the unused variables which currently are only commented out
(GSSLibStub.c and
NativeUtil.c). When testing, did u enable debugging? If not, maybe
worthwhile to try it out to make sure things work as expected.
Thanks,
Valerie
On 4/11/2018 9:50 PM, Weijun Wang wrote:
> Hi Valerie
>
> I updated the webrev at
>
> http://cr.openjdk.java.net/~weijun/8200468/webrev.01/
>
> The only change is that I prepend "GSS_DLLIMP" to all gss_* functions in gssapi.h. The file has the following lines
>
> 283 #if defined (_WIN32) && defined (_MSC_VER)
> 284 # ifdef GSS_DLL_FILE
> 285 # define GSS_DLLIMP __declspec(dllexport)
> 286 # else
> 287 # define GSS_DLLIMP __declspec(dllimport)
> 288 # endif
> 289 #else
> 290 # define GSS_DLLIMP
> 291 #endif
>
> I added it so the exact same header file can be used to write a native GSS-API library which would export these functions.
>
> Is this OK? Tests run fine with both MIT krb5 and Heimdal libraries.
>
> Thanks
> Max
>
>
>> On Apr 4, 2018, at 10:19 AM, Weijun Wang <weijun.wang at oracle.com> wrote:
>>
>> Hi All
>>
>> Please take a review at
>>
>> http://cr.openjdk.java.net/~weijun/8200468/webrev.00/
>>
>> Like in *nix, native GSS-API bridge is turned on by setting -Dsun.security.jgss.native=true. Please note there is no default native GSS-API library on Windows and you need to supply your own, like this:
>>
>> java -Dsun.security.jgss.native=true -Dsun.security.jgss.lib=/path/to/gssapi64.dll App ...
>>
>> You can manually test the change with
>>
>> jtreg -Dnative.krb5.libs=j=,n=/path/to/gssapi64.dll test/jdk/sun/security/krb5/auto/BasicProc.java
>>
>> Thanks
>> Max
>>
>> p.s. You can get a gssapi64.dll from https://web.mit.edu/KERBEROS/kfw-4.1/kfw-4.1.html.
More information about the security-dev
mailing list