RFR: 8349546: Linux support for Kerberos "nativeccache" functionality [v13]
Nick Hall
duke at openjdk.org
Fri Dec 5 11:10:20 UTC 2025
On Thu, 4 Dec 2025 18:38:06 GMT, Erik Joelsson <erikj at openjdk.org> wrote:
> > @erikj79 after a little playing around, I've managed to get this to work.
> > I can now build an Oracle Linux 6 devkit (from RHEL8) and can build a JDK wih my changes from this devkit. It required a few changes beyond just the packages for libkrb5 - there was a missing library (ISL) required for the newer gcc, and a bug causing some of the files to attempt to install in /usr/local (missing `--prefix`). I'm not sure if this was exactly what you're looking for, but it's all on the latest commit on this branch for your review. I'm not sure how to test beyond the tests I've done locally.
>
> That's impressive getting it to work. As Mikael says, I think it would be better to break out any additional changes you made to the devkit makefile into a separate change, if we still want to go that route. I haven't looked into the ISL dependency much, but it looks like something we should add to the devkit for newer GCCs. For this change I was mostly interested in the extra libraries that would be needed in the sysroot. However, as @wangweij pointed out, if this could be handled with FFM instead of JNI, that would be even better and avoid all this hassle.
Happy to - will somebody need to create me an issue in the tracker so I can raise a PR?
-------------
PR Comment: https://git.openjdk.org/jdk/pull/28075#issuecomment-3616413154
More information about the security-dev
mailing list