sun.security.spnego.msinterop does not work anymore/disable by default for 15
Weijun Wang
weijun.wang at oracle.com
Thu Apr 16 13:14:48 UTC 2020
>>
>> So I guess it's because Java has no subkey set. Try "-Dsun.security.krb5.acceptor.subkey=true" to see if it's bigger.
>
> Yes, it is bigger and inline with the other Kerberos implemenatations.
> Is there any reason not to turn it on by default since the others do it too?
No real reason but I seldom want to change the existing behavior.
Except for being smaller, is there any other problem?
Thanks,
Max
More information about the security-dev
mailing list