RFR 8239385: KerberosTicket client name refers wrongly to sAMAccountName in AD

Martin Balao mbalao at redhat.com
Wed Apr 1 00:22:58 UTC 2020

Hi Max,

Thanks for having a look at the CSR.

On 3/30/20 11:39 PM, Weijun Wang wrote:
> 1. I don't think there is a need to talk about the java.security.krb5.conf system property, the krb5.conf file name is more popular.

Added a reference to the krb5.conf file in the first place. I wish we
could keep a reference to the System property for completeness.

> 2. I'd rather always say "TGS requests" instead of "AP requests".

Changed. This also helped me to fix an AS/AP typo.

I set the target release to JDK-15.

Look forward to the CSR approval.


More information about the security-dev mailing list