RFR: 8349546: Linux support for Kerberos "nativeccache" functionality [v11]

Weijun Wang weijun at openjdk.org
Wed Nov 12 15:39:45 UTC 2025


On Wed, 12 Nov 2025 15:12:04 GMT, Nick Hall <duke at openjdk.org> wrote:

>> src/java.security.jgss/share/classes/sun/security/krb5/Credentials.java line 536:
>> 
>>> 534:             System.loadLibrary("osxkrb5");
>>> 535:         } else if (OperatingSystem.isLinux()) {
>>> 536:             System.loadLibrary("linuxkrb5");
>> 
>> Can we use the same lib name on macOS and Linux?
>
> We can - this was mostly just an attempt to avoid changing MacOS for the sake of a library name - I also wasn't sure if this might lead to other packaging changes/issues for people who package JVMs for MacOS?  My original approach had a single name, so it would straightforward to make this happen.  What do you think?

I don't have a strong opinion. This is internal structure, but you're right if someone tries to package a macOS-only JVM they would need some change. If we want this feature to be backported, maybe it's safe to keep using the old name.

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/28075#discussion_r2518798712


More information about the security-dev mailing list