RFR: 8349546: Linux support for Kerberos "nativeccache" functionality [v11]
Weijun Wang
weijun at openjdk.org
Wed Nov 12 15:39:45 UTC 2025
On Wed, 12 Nov 2025 15:12:04 GMT, Nick Hall <duke at openjdk.org> wrote:
>> src/java.security.jgss/share/classes/sun/security/krb5/Credentials.java line 536:
>>
>>> 534: System.loadLibrary("osxkrb5");
>>> 535: } else if (OperatingSystem.isLinux()) {
>>> 536: System.loadLibrary("linuxkrb5");
>>
>> Can we use the same lib name on macOS and Linux?
>
> We can - this was mostly just an attempt to avoid changing MacOS for the sake of a library name - I also wasn't sure if this might lead to other packaging changes/issues for people who package JVMs for MacOS? My original approach had a single name, so it would straightforward to make this happen. What do you think?
I don't have a strong opinion. This is internal structure, but you're right if someone tries to package a macOS-only JVM they would need some change. If we want this feature to be backported, maybe it's safe to keep using the old name.
-------------
PR Review Comment: https://git.openjdk.org/jdk/pull/28075#discussion_r2518798712
More information about the security-dev
mailing list