RFR 6722928: Support SSPI as a native GSS-API provider

[Nico Williams]

On Fri, May 31, 2019 at 10:48:19PM +0800, Weijun Wang wrote:
> > On May 31, 2019, at 3:09 AM, Nico Williams <Nico.Williams at twosigma.com> wrote:
> > Can you
> > just use the empty realm like Heimdal and MIT do?
> 
> This is for export(), where they use "WELLKNOWN:ORG.H5L.REFERALS-REALM" but I
> hesitate to introduce it.

Heimdal defines that, but doesn't use it.  MIT doesn't even define it.

> > Ah, but if it's not the "current" realm?  (What do you mean by "current"
> > anyways?)
> 
> Current is default, or USERDNSDOMAIN.
> 
> Then I won't remove it and InitiateSecurityContext will use it.

Hmm, ok.

> > I would think JDK_SSPI_TRACE would be a better name...
> 
> Yes, I can.

OK.

Nico
--