Commit Graph

182 Commits

Author SHA1 Message Date
Weijun Wang 2241a3720d 8019267: NPE in AbstractSaslImpl when trace level >= FINER in KRB5
Reviewed-by: mullan
2013-07-10 15:11:32 +08:00
Weijun Wang cb9be51085 8017453: ReplayCache tests fail on multiple platforms
Reviewed-by: xuelei
2013-06-24 16:25:28 +08:00
Weijun Wang af996219c7 8001326: Improve Kerberos caching
Reviewed-by: valeriep
2013-06-21 18:26:13 +08:00
Weijun Wang 77e684366c 8014310: JAAS/Krb5LoginModule using des encytypes failure with NPE after JDK-8012679
Reviewed-by: valeriep
2013-06-13 09:59:29 +08:00
Weijun Wang c43d7aa0de 8014196: ktab creates a file with zero kt_vno
Reviewed-by: valeriep
2013-05-24 17:15:43 +08:00
Weijun Wang 0c02ab3a5e 8012679: Let allow_weak_crypto default to false
Reviewed-by: valeriep
2013-05-08 08:25:34 +08:00
Weijun Wang 5ec35be1d2 8010192: Enable native JGSS provider on Mac
Reviewed-by: valeriep
2013-05-07 12:30:36 +08:00
Weijun Wang 905250cdfe 8012082: SASL: auth-conf negotiated, but unencrypted data is accepted, reset to unencrypt
Reviewed-by: vinnie
2013-05-01 21:05:10 +08:00
Weijun Wang 70b23a07be 8005523: Unbound krb5 for TLS
Reviewed-by: xuelei
2013-04-27 18:25:16 +08:00
Weijun Wang dfcf6055a7 8011124: Make KerberosTime immutable
Reviewed-by: xuelei
2013-04-17 10:15:33 +08:00
Weijun Wang 7d8e86633a 8005460: [findbugs] Probably returned array should be cloned
Reviewed-by: xuelei
2013-04-11 10:58:17 +08:00
Weijun Wang 5f08966515 8009875: Provide a default udp_preference_limit for krb5.conf
Reviewed-by: valeriep
2013-03-23 11:49:39 +08:00
Weijun Wang 2ec1224ff0 8000653: SPNEGO tests fail at context.getDelegCred().getRemainingInitLifetime(mechOid)
Reviewed-by: valeriep
2013-03-09 17:27:58 +08:00
Mark Sheppard ec9e303630 8006182: cleanup to use java.util.Base64 in java security component, providers, and regression tests
Refactored code to use java.util.Base64 Mime Encoder and Decoder as a replacement for sun.misc.BASE64Encoder and sun.misc.BASE64Decoder

Reviewed-by: vinnie, chegar, sherman
2013-02-21 20:01:22 +00:00
Weijun Wang d8233ec657 8001104: Unbound SASL service: the GSSAPI/krb5 mech
Reviewed-by: valeriep
2013-02-09 16:43:49 +08:00
Alan Bateman c12b624078 8005978: shell tests need to use the $COMPILEJDK for javac, jar and other tools
Reviewed-by: chegar
2013-01-11 20:19:55 +00:00
Weijun Wang d9c892c9fd 8005447: default principal should act as anyone
Reviewed-by: valeriep
2013-01-08 14:54:56 +08:00
Lana Steuck b7af263526 Merge 2012-12-28 18:36:41 -08:00
David Katleman 306cab1006 8004982: JDK8 source with GPL header errors
Reviewed-by: ohair
2012-12-20 16:24:50 -08:00
Weijun Wang 5ded9d47a1 7197159: accept different kvno if there no match
Reviewed-by: xuelei
2012-12-17 12:18:46 +08:00
Mark Sheppard c9063f559f 8003890: corelibs test scripts should pass TESTVMOPTS
Reviewed-by: chegar, alanb
2012-12-13 14:47:35 +00:00
Weijun Wang 2be2f20b65 8004488: wrong permissions checked in krb5
Reviewed-by: xuelei
2012-12-11 13:14:56 +08:00
Weijun Wang 2aea4cbc8c 8002344: Krb5LoginModule config class does not return proper KDC list from DNS
Co-authored-by: Severin Gehwolf <sgehwolf@redhat.com>
Reviewed-by: weijun
2012-11-19 11:13:08 +08:00
Weijun Wang 5fca8126cd 6355584: Introduce constrained Kerberos delegation
Reviewed-by: valeriep
2012-11-07 14:13:01 +08:00
Alan Bateman 430592a30e 7197491: update copyright year to match last edit in jdk8 jdk repository
Reviewed-by: chegar, ksrini
2012-11-02 15:50:11 +00:00
Weijun Wang a60d4fd720 7110803: SASL service for multiple hostnames
Reviewed-by: mullan
2012-11-02 10:48:04 +08:00
Weijun Wang 14364d11d2 7195426: kdc_default_options not supported correctly
Reviewed-by: xuelei
2012-10-29 14:14:07 +08:00
Weijun Wang 620f0e5006 7184246: Simplify Config.get() of krb5
Reviewed-by: xuelei
2012-10-29 14:14:06 +08:00
Weijun Wang 8744fd02bd 8001208: Fix for KRB5CCNAME not complete
Reviewed-by: xuelei
2012-10-23 10:02:23 +08:00
Weijun Wang a5312cbadb 7201053: Krb5LoginModule shows NPE when both useTicketCache and storeKey are set to true
Reviewed-by: mullan
2012-10-08 10:42:43 +08:00
Weijun Wang f7c2d784ae 7194472: FileKeyTab.java test fails on Windows
Reviewed-by: alanb
2012-08-28 17:25:07 +08:00
Weijun Wang 66f06a99dc 7152121: Krb5LoginModule no longer handles keyTabNames with "file:" prefix
Reviewed-by: mullan
2012-08-27 10:23:43 +08:00
Weijun Wang 3db0a0443c 7178649: TEST BUG: BadKdc3.java needs improvement to ignore the unlikely but possible timeout
Reviewed-by: xuelei
2012-07-21 19:56:55 +08:00
Weijun Wang 3e4ca7604b 6966259: Make PrincipalName and Realm immutable
Reviewed-by: xuelei
2012-07-11 17:10:34 +08:00
Weijun Wang 911aeb6828 7176574: sun/security/krb5/auto/TcpTimeout.java failed with solaris-i586
Reviewed-by: chegar
2012-06-13 19:23:23 +08:00
Weijun Wang cef72cc08e 7172701: KDC tests cleanup
Reviewed-by: xuelei
2012-06-05 17:11:26 +08:00
Weijun Wang f785c8a7a4 7162687: enhance KDC server availability detection
Reviewed-by: valeriep
2012-05-23 15:51:10 +08:00
Weijun Wang d11c407c11 7170308: timing error in the krb5 test SSL.java
Reviewed-by: xuelei
2012-05-21 15:40:30 +08:00
Weijun Wang 9c8af427e8 7158329: NPE in sun.security.krb5.Credentials.acquireDefaultCreds()
Reviewed-by: valeriep, jjg
2012-04-10 12:15:03 +08:00
Weijun Wang 7b947b7a42 7152176: More krb5 tests
Reviewed-by: xuelei
2012-03-20 19:12:21 +08:00
Alan Bateman 3269d85838 7113349: Initial changeset for Macosx port to jdk
Co-authored-by: Alexander Potochkin <alexander.potochkin@oracle.com>
Co-authored-by: Alexander Zuev <alexander.zuev@oracle.com>
Co-authored-by: Andrew Brygin <andrew.brygin@oracle.com>
Co-authored-by: Artem Ananiev <artem.ananiev@oracle.com>
Co-authored-by: Alex Strange <astrange@apple.com>
Co-authored-by: Bino George <bino@apple.com>
Co-authored-by: Christine Lu <christine.lu@oracle.com>
Co-authored-by: David Katleman <david.katleman@oracle.com>
Co-authored-by: David Durrence <david_durrence@apple.com>
Co-authored-by: Dmitry Cherepanov <dmitry.cherepanov@oracle.com>
Co-authored-by: Greg Lewis <glewis@eyesbeyond.com>
Co-authored-by: Kevin Miller <kevin_m_miller@apple.com>
Co-authored-by: Kurt Miller <kurt@intricatesoftware.com>
Co-authored-by: Landon Fuller <landonf@plausiblelabs.com>
Co-authored-by: Leonid Romanov <leonid.romanov@oracle.com>
Co-authored-by: Loefty Walkowiak <loefty@apple.com>
Co-authored-by: Mark Reinhold <mark.reinhold@oracle.com>
Co-authored-by: Naoto Sato <naoto.sato@oracle.com>
Co-authored-by: Philip Race <philip.race@oracle.com>
Co-authored-by: Roger Hoover <rhoover@apple.com>
Co-authored-by: Scott Kovatch <scott.kovatch@oracle.com>
Co-authored-by: Sergey ByloKhov <sergey.bylokhov@oracle.com>
Co-authored-by: Mike Swingler <swingler@apple.com>
Co-authored-by: Tomas Hurka <tomas.hurka@oracle.com>
Reviewed-by: jjh, alanb, dholmes, anthony, ohrstrom, ksrini, jrose, weijun, smarks
2012-03-06 20:34:38 +00:00
Weijun Wang d21a6ce41f 7144530: KeyTab.getInstance(String) no longer handles keyTabNames with "file:" prefix
Reviewed-by: valeriep
2012-02-21 08:51:26 +08:00
Weijun Wang 18a83d872b 6880619: reg tests for 6879540
Reviewed-by: valeriep
2012-02-08 11:44:36 +08:00
Weijun Wang 5cbd245bad 7118809: rcache deadlock
Reviewed-by: valeriep
2012-01-16 10:10:56 +08:00
Weijun Wang 440adedd51 7122169: TcpTimeout fail for various reasons
Reviewed-by: alanb
2011-12-22 15:35:55 +08:00
Weijun Wang 687f622f95 7115744: Do not call File::deleteOnExit in security tests
Reviewed-by: xuelei
2011-11-28 18:16:29 +08:00
Weijun Wang 650bd8320d 7077646: gssapi wrap for CFX per-message tokens always set FLAG_ACCEPTOR_SUBKEY
Reviewed-by: valeriep
2011-09-28 14:21:11 +08:00
Weijun Wang a912e7557c 7077640: gss wrap for cfx doesn't handle rrc != 0
Reviewed-by: valeriep
2011-09-28 14:21:10 +08:00
Weijun Wang a099202006 7089889: Krb5LoginModule.login() throws an exception if used without a keytab
Reviewed-by: xuelei, valeriep
2011-09-28 14:21:10 +08:00
Weijun Wang ba77c3a48f 7067974: multiple ETYPE-INFO-ENTRY with same etype and different salt
Reviewed-by: valeriep
2011-09-07 08:56:55 +08:00
Weijun Wang d159e01aeb 7076415: sun/security/krb5/runNameEquals.sh failed on sles 10
Reviewed-by: xuelei
2011-08-12 11:20:45 +08:00
Weijun Wang 840e8200ad 7061379: [Kerberos] Cross-realm authentication fails, due to nameType problem
Reviewed-by: valeriep
2011-08-04 18:18:45 +08:00
Weijun Wang 9ce9d5e6ba 7043737: klist does not detect non-existing keytab
Reviewed-by: valeriep
2011-06-08 14:01:34 +08:00
Weijun Wang 61e1313498 7040151: SPNEGO GSS code does not parse tokens in accordance to RFC 2478
Reviewed-by: valeriep
2011-05-03 02:48:59 +08:00
Weijun Wang 317bcf10c2 7040916: DynamicKeyTab test fails on Windows
Reviewed-by: xuelei
2011-05-01 14:22:32 +08:00
Weijun Wang a9a765fdfc 6950929: Failures on Solaris sparc 64bit sun/security/krb5/auto/BadKdc4.java (and linux?)
Reviewed-by: xuelei
2011-04-27 17:11:06 +08:00
Weijun Wang 68d5cd6f23 6894072: always refresh keytab
Reviewed-by: valeriep
2011-04-20 18:41:32 +08:00
Lana Steuck b99716e22a Merge 2011-04-17 16:19:29 -07:00
Kelly O'Hair 7c8e01891a Merge 2011-04-13 16:56:16 -07:00
Weijun Wang 6f7b1ef68a 7030180: AES 128/256 decrypt exception
Reviewed-by: valeriep
2011-04-11 10:22:39 +08:00
Kelly O'Hair d2b1e20c7d 7033660: Update copyright year to 2011 on any files changed in 2011
Reviewed-by: dholmes
2011-04-06 22:06:11 -07:00
Weijun Wang 2c02243de9 7032354: no-addresses should not be used on acceptor side
Reviewed-by: valeriep
2011-04-07 08:51:33 +08:00
Weijun Wang 680370af5b 7031536: test/sun/security/krb5/auto/HttpNegotiateServer.java should not use static ports
Reviewed-by: xuelei
2011-03-28 18:04:17 +08:00
Weijun Wang 1ce7eeaa52 7019384: Realm.getRealmsList returns realms list in wrong (reverse) order
Reviewed-by: xuelei
2011-03-28 18:04:10 +08:00
Weijun Wang d4fbb08ec0 7018928: test failure: sun/security/krb5/auto/SSL.java
Reviewed-by: valeriep
2011-02-15 12:11:15 +08:00
Stuart Marks 07549260db 7008713: diamond conversion of kerberos5 and security tools
Reviewed-by: weijun
2011-01-12 13:52:09 -08:00
Weijun Wang fdbca6b5f6 6975866: api/org_ietf/jgss/GSSContext/index.html#wrapUnwrapIOTest started to fail since jdk7 b102
Reviewed-by: valeriep
2010-12-17 11:03:33 +08:00
Weijun Wang 3281356d0f 7004721: ktarg.sh fails when there's no default realm
Reviewed-by: xuelei
2010-12-06 06:49:18 +08:00
Weijun Wang 9f743252e5 7002036: ktab return code changes on a error case
Reviewed-by: valeriep
2010-11-24 07:43:06 +08:00
Weijun Wang 11c0d2dbec 6979329: CCacheInputStream fails to read ticket cache files from Kerberos 1.8.1
Reviewed-by: valeriep
2010-11-22 09:43:58 +08:00
Weijun Wang 707e6f0318 6960894: Better AS-REQ creation and processing
Reviewed-by: valeriep
2010-11-12 21:33:14 +08:00
Weijun Wang 5b6c23c809 6952519: kdc_timeout is not being honoured when using TCP
Reviewed-by: valeriep
2010-11-09 08:34:11 +08:00
Weijun Wang 42b61014b3 6997740: ktab entry related test compilation error
Reviewed-by: valeriep
2010-11-06 09:11:18 +08:00
Weijun Wang d2ef113186 6950546: "ktab -d name etype" to "ktab -d name [-e etype] [kvno | all | old]"
6984764: kerberos fails if service side keytab is generated using JDK ktab

Reviewed-by: valeriep
2010-10-28 21:14:44 +08:00
Kelly O'Hair f7e31fc6c2 6982137: Rebranding pass 2 - missed copyright changes
Reviewed-by: mbykov
2010-09-09 16:26:46 -07:00
Weijun Wang 34198dbc4c 6976536: Solaris JREs do not have the krb5.kdc.bad.policy configured by default
Reviewed-by: valeriep
2010-08-19 11:26:32 +08:00
Weijun Wang 9d92d626e3 6972005: ConfPlusProp.java test failure when DNS has info for realm
Reviewed-by: xuelei
2010-07-26 17:21:51 +08:00
Weijun Wang c93ecb6623 6946669: SSL/Krb5 should not call EncryptedData.reset(data, false)
Reviewed-by: xuelei
2010-06-24 14:26:35 +08:00
Weijun Wang 6426b52076 6844907: krb5 etype order should be from strong to weak
Reviewed-by: valeriep
2010-06-24 14:26:28 +08:00
Weijun Wang 5141220c5e 6959292: regression: cannot login if session key and preauth does not use the same etype
Reviewed-by: xuelei, valeriep
2010-06-17 13:46:15 +08:00
Weijun Wang 2d9fcecd29 6951366: kerberos login failure on win2008 with AD set to win2000 compat mode
Reviewed-by: valeriep, xuelei
2010-06-04 19:28:53 +08:00
Lana Steuck fd45b4188c Merge 2010-05-28 12:10:14 -07:00
Kelly O'Hair fe008ae27a 6943119: Rebrand source copyright notices
Reviewed-by: darcy, weijun
2010-05-25 15:58:33 -07:00
Weijun Wang 235a3e379c 6948287: KDC test strange knvo
Reviewed-by: xuelei
2010-05-25 18:20:54 +08:00
Weijun Wang 480f0af4e8 6932525: Incorrect encryption types of KDC_REQ_BODY of AS-REQ with pre-authentication
Reviewed-by: valeriep
2010-05-24 10:05:04 +08:00
Weijun Wang a7fbe2d858 6882687: KerberosTime too imprecise
Reviewed-by: valeriep
2010-05-24 09:37:02 +08:00
Weijun Wang 20fbeb53cd 6844193: support max_retries in krb5.conf
Reviewed-by: valeriep
2010-04-29 15:51:10 +08:00
Weijun Wang 7cc72590c7 6856069: PrincipalName.clone() does not invoke super.clone()
Reviewed-by: chegar
2010-04-22 12:45:36 +08:00
Weijun Wang 5d137e0d2f 6944847: native gss lib names on linux
Reviewed-by: valeriep
2010-04-20 19:30:31 +08:00
Weijun Wang 23a0fee518 6829283: HTTP/Negotiate: Autheticator triggered again when user cancels the first one
Reviewed-by: chegar
2010-03-18 18:26:37 +08:00
Weijun Wang 8055ab99b7 6844909: support allow_weak_crypto in krb5.conf
Reviewed-by: valeriep
2010-03-04 10:37:16 +08:00
Weijun Wang 4641ee098b 6919610: KeyTabInputStream uses static field for per-instance value
Reviewed-by: mullan
2010-01-26 17:03:48 +08:00
Weijun Wang 9645beba5c 6917791: KeyTabEntry, when the byte value smaller then 16, the string drop '0'
Reviewed-by: xuelei
2010-01-19 11:43:45 +08:00
Weijun Wang a3071a3b47 6913636: kvno check in JSSE
Reviewed-by: valeriep
2010-01-05 10:40:44 +08:00
Weijun Wang d6e00a699d 6895424: RFC 5653
Reviewed-by: valeriep
2010-01-05 10:40:36 +08:00
Weijun Wang 56ac52238f 6907425: JCK Kerberos tests fail since b77
Reviewed-by: valeriep
2009-12-24 13:56:28 +08:00
Weijun Wang 709a5076d8 6843127: krb5 should not try to access unavailable kdc too often
Reviewed-by: valeriep, mullan
2009-12-24 13:56:19 +08:00
Vinnie Ryan 5debca27af 6906854: SSL/Krb5 testcase should not use a fixed port number
Reviewed-by: alanb
2009-12-03 21:30:27 +00:00
Vinnie Ryan 7a403456e5 Merge 2009-12-02 17:34:56 +00:00
Vinnie Ryan 6e6324c607 6906510: Fix testcase for 6894643: Separate out dependency on Kerberos
Reviewed-by: weijun
2009-12-02 17:06:50 +00:00