RFR: 8349546: Linux support for Kerberos "nativeccache" functionality [v12]

Nick Hall duke at openjdk.org
Tue Nov 18 13:20:42 UTC 2025


On Tue, 18 Nov 2025 12:15:38 GMT, Nick Hall <duke at openjdk.org> wrote:

> I will say that libkrb5 is largely pretty stable (it's really old code with few features being added), though I'm not sure what range is required to be supported here in terms of operating system builds? Worst case though, any incompatibility will just result in this code not being used, although as it'd be a silent failure without debug flags, that's perhaps not ideal (but has always been the case, even before this change).

Two data points, but the JVM/krb5 library/jtreg test compiled on RHEL8 works on Ubuntu 24.04, and these two are reasonably far apart:

- RHEL8
glibc 2.28
kernel 4.18.0
krb5 1.18

- Ubuntu 24.04
glibc 2.39
kernel 6.8.0
krb5 1.20

Obviously the reverse doesn't work, but that's to be expected.

-------------

PR Comment: https://git.openjdk.org/jdk/pull/28075#issuecomment-3547609210


More information about the security-dev mailing list