RFR 8231508: Spec Clarification : KeyTab:exist() method does not specify about the fallback details

Weijun Wang weijun.wang at oracle.com
Fri Oct 25 02:15:18 UTC 2019


I added a CSR at https://bugs.openjdk.java.net/browse/JDK-8232994, please take a review.

My point is that not only it's useless but it also be misleading, so better remove than ignore.

Thanks,
Max


> On Oct 24, 2019, at 4:16 PM, Weijun Wang <weijun.wang at oracle.com> wrote:
> 
> Please review the patch below:
> 
> --- a/src/java.security.jgss/share/classes/javax/security/auth/kerberos/KeyTab.java
> +++ b/src/java.security.jgss/share/classes/javax/security/auth/kerberos/KeyTab.java
> @@ -303,13 +303,11 @@
>  
>      /**
>       * Checks if the keytab file exists. Implementation of this method
>       * should make sure that the result matches the latest status of the
>       * keytab file.
> -     * <p>
> -     * The caller can use the result to determine if it should fallback to
> -     * another mechanism to read the keys.
> +     *
>       * @return true if the keytab file exists; false otherwise.
>       * @throws SecurityException if a security manager exists and the read
>       * access to the keytab file is not permitted
>       */
>      public boolean exists() {
> 
> The spec here is not clear and even our own JGSS SubjectComber looks into both KeyTab and KerberosKey and there is no fallback of any kind.
> 
> Do you think this is worth a CSR?
> 
> Thanks,
> Max
> 




More information about the security-dev mailing list