RFR 8005819: Support cross-realm MSSFU

Martin Balao mbalao at redhat.com
Thu Aug 15 22:31:40 UTC 2019


Hi,

I'd like to propose Webrev.00 for JDK-8005819 [1]:

 * http://cr.openjdk.java.net/~mbalao/webrevs/8005819/8005819.webrev.00/

Implementation is based in the MS-SFU document [2].

Testing

 * ReferralsTest extended to support S4U2Self and S4U2Proxy referrals

 * No regressions found in jdk/sun/security/krb5 category

 * Tested against a real Active Directory 2016 setup, with 2 referral hops
  * Note: I can provide a PCAP capture and my internal test code if
there is interest

Thanks,
Martin.-

--
[1] - https://bugs.openjdk.java.net/browse/JDK-8005819
[2] -
https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-sfu/3bff5864-8135-400e-bdd9-33b552051d94



More information about the security-dev mailing list