RFR: 8279064: New options for ktab to provide non-default salt

Weijun Wang weijun at openjdk.java.net
Fri Jan 7 19:44:49 UTC 2022


Please review this enhancement and its [CSR](https://bugs.openjdk.java.net/browse/JDK-8279632). Two new options `-s salt` and `-f` can be specified on the `ktab` command when adding entries.

I'm a little concerned about the compatibility risk described in the CSR, i.e. the `-f` option is already used in `ktab -d` to force removing entries. Hopefully not many people writing their own wrappers on ktab that always include the `-f` option. I do want to be consistent with the naming in the MIT krb5 ktutil command.

-------------

Commit messages:
 - 8279064: New options for ktab to provide non-default salt

Changes: https://git.openjdk.java.net/jdk/pull/6991/files
 Webrev: https://webrevs.openjdk.java.net/?repo=jdk&pr=6991&range=00
  Issue: https://bugs.openjdk.java.net/browse/JDK-8279064
  Stats: 155 lines in 5 files changed: 135 ins; 1 del; 19 mod
  Patch: https://git.openjdk.java.net/jdk/pull/6991.diff
  Fetch: git fetch https://git.openjdk.java.net/jdk pull/6991/head:pull/6991

PR: https://git.openjdk.java.net/jdk/pull/6991



More information about the security-dev mailing list