OpenJDK krb5 ignore /etc/krb5.conf? (original) (raw)

Weijun Wang weijun.wang at oracle.com
Thu Jul 5 08:34:28 UTC 2012


Hi Scott

On Mac since Lion, sun.security.krb5.Config tries to locate the config info in this order:

  1. java.security.krb5.conf system property
  2. ${jre}/lib/security/krb5.conf
  3. SCDynamicStoreConfig

The main difference from other platforms is that it will not try config files, say, /Library/Preferences/edu.mit.Kerberos or /etc/krb5.conf.

On the other hand, even /usr/bin/kinit comes with Lion reads the config file (if there is no SCDynamicStoreConfig setting).

Is there a special reason for the current Java behavior? I do notice that the Apple 6u33 already does this.

Thanks Max



More information about the security-dev mailing list