Commit Graph

44 Commits

Author SHA1 Message Date
Weijun Wang
2cde289af4 8138638: Security tests using jdk/test/sun/security/krb5/auto/KDC.java fail intermittently with OutOfMemoryError
Reviewed-by: xuelei
2015-12-07 15:48:56 +08:00
Weijun Wang
041dbf030e 8048030: Expectations should be consistent
Reviewed-by: valeriep, mullan, ahgross
2015-05-24 16:35:12 +08:00
Weijun Wang
31e49478d4 8132111: Do not request for addresses for forwarded TGT
Reviewed-by: mullan
2015-08-03 09:25:02 +08:00
Weijun Wang
e81669d5df 8131051: KDC might issue a renewable ticket even if not requested
Reviewed-by: xuelei
2015-07-21 18:02:36 +08:00
Artem Smotrakov
a57b0dd1c8 8075297: Tests for RFEs 4515853 and 4745056
Reviewed-by: weijun
2015-07-17 17:30:55 -07:00
Weijun Wang
5d91ae3352 8058290: JAAS Krb5LoginModule has suspect ticket-renewal logic, relies on clockskew grace
Reviewed-by: mullan
2015-07-13 17:44:34 +08:00
Sibabrata Sahoo
afc6a95457 8075301: Tests for sun.security.krb5.principal system property
Reviewed-by: weijun
2015-06-30 22:32:03 +08:00
Weijun Wang
d922187012 8031111: fix krb5 caddr
Reviewed-by: valeriep
2015-06-04 15:29:29 +08:00
Artem Smotrakov
64969c0889 8075007: Additional tests for krb5-related cipher suites with unbound server
Reviewed-by: weijun
2015-04-27 21:02:40 +08:00
Weijun Wang
873b88dcc9 8022582: Relax response flags checking in sun.security.krb5.KrbKdcRep.check
Reviewed-by: mullan
2015-01-27 18:16:27 +08:00
Weijun Wang
26099e744a 8044500: Add kinit options and krb5.conf flags that allow users to obtain renewable tickets and specify ticket lifetimes
Reviewed-by: valeriep
2014-12-09 18:28:26 +08:00
Weijun Wang
a57ab24f53 8036779: sun.security.krb5.KdcComm interprets kdc_timeout as msec instead of sec
Reviewed-by: xuelei
2014-05-30 14:37:43 +08:00
Lana Steuck
657b9db1ba 8029235: Update copyright year to match last edit in jdk8 jdk repository for 2013
Updated files with 2011, 2012 and 2013 years according to the file's last updated date

Reviewed-by: tbell, lancea, chegar
2013-12-26 12:04:16 -08:00
Weijun Wang
7ddfe32e7b 8028351: JWS doesn't get authenticated when using kerberos auth proxy
Reviewed-by: xuelei
2013-12-04 09:14:42 +08:00
Weijun Wang
af996219c7 8001326: Improve Kerberos caching
Reviewed-by: valeriep
2013-06-21 18:26:13 +08:00
Weijun Wang
5f08966515 8009875: Provide a default udp_preference_limit for krb5.conf
Reviewed-by: valeriep
2013-03-23 11:49:39 +08:00
Weijun Wang
d9c892c9fd 8005447: default principal should act as anyone
Reviewed-by: valeriep
2013-01-08 14:54:56 +08:00
Weijun Wang
5fca8126cd 6355584: Introduce constrained Kerberos delegation
Reviewed-by: valeriep
2012-11-07 14:13:01 +08:00
Weijun Wang
3e4ca7604b 6966259: Make PrincipalName and Realm immutable
Reviewed-by: xuelei
2012-07-11 17:10:34 +08:00
Weijun Wang
cef72cc08e 7172701: KDC tests cleanup
Reviewed-by: xuelei
2012-06-05 17:11:26 +08:00
Weijun Wang
7b947b7a42 7152176: More krb5 tests
Reviewed-by: xuelei
2012-03-20 19:12:21 +08:00
Weijun Wang
687f622f95 7115744: Do not call File::deleteOnExit in security tests
Reviewed-by: xuelei
2011-11-28 18:16:29 +08:00
Weijun Wang
ba77c3a48f 7067974: multiple ETYPE-INFO-ENTRY with same etype and different salt
Reviewed-by: valeriep
2011-09-07 08:56:55 +08:00
Weijun Wang
840e8200ad 7061379: [Kerberos] Cross-realm authentication fails, due to nameType problem
Reviewed-by: valeriep
2011-08-04 18:18:45 +08:00
Weijun Wang
68d5cd6f23 6894072: always refresh keytab
Reviewed-by: valeriep
2011-04-20 18:41:32 +08:00
Weijun Wang
2c02243de9 7032354: no-addresses should not be used on acceptor side
Reviewed-by: valeriep
2011-04-07 08:51:33 +08:00
Stuart Marks
07549260db 7008713: diamond conversion of kerberos5 and security tools
Reviewed-by: weijun
2011-01-12 13:52:09 -08:00
Weijun Wang
707e6f0318 6960894: Better AS-REQ creation and processing
Reviewed-by: valeriep
2010-11-12 21:33:14 +08:00
Weijun Wang
d2ef113186 6950546: "ktab -d name etype" to "ktab -d name [-e etype] [kvno | all | old]"
6984764: kerberos fails if service side keytab is generated using JDK ktab

Reviewed-by: valeriep
2010-10-28 21:14:44 +08:00
Weijun Wang
5141220c5e 6959292: regression: cannot login if session key and preauth does not use the same etype
Reviewed-by: xuelei, valeriep
2010-06-17 13:46:15 +08:00
Weijun Wang
2d9fcecd29 6951366: kerberos login failure on win2008 with AD set to win2000 compat mode
Reviewed-by: valeriep, xuelei
2010-06-04 19:28:53 +08:00
Lana Steuck
fd45b4188c Merge 2010-05-28 12:10:14 -07:00
Kelly O'Hair
fe008ae27a 6943119: Rebrand source copyright notices
Reviewed-by: darcy, weijun
2010-05-25 15:58:33 -07:00
Weijun Wang
235a3e379c 6948287: KDC test strange knvo
Reviewed-by: xuelei
2010-05-25 18:20:54 +08:00
Weijun Wang
480f0af4e8 6932525: Incorrect encryption types of KDC_REQ_BODY of AS-REQ with pre-authentication
Reviewed-by: valeriep
2010-05-24 10:05:04 +08:00
Weijun Wang
56ac52238f 6907425: JCK Kerberos tests fail since b77
Reviewed-by: valeriep
2009-12-24 13:56:28 +08:00
Weijun Wang
709a5076d8 6843127: krb5 should not try to access unavailable kdc too often
Reviewed-by: valeriep, mullan
2009-12-24 13:56:19 +08:00
Weijun Wang
6a6d0a3c7a 6853328: Support OK-AS-DELEGATE flag
Reviewed-by: valeriep
2009-11-27 08:51:28 +08:00
Weijun Wang
9b3b87dab8 6893158: AP_REQ check should use key version number
Reviewed-by: valeriep, xuelei
2009-10-28 15:32:30 +08:00
Weijun Wang
7b2694f5b3 6849275: enhance krb5 reg tests
Reviewed-by: xuelei
2009-06-17 15:26:58 +08:00
Weijun Wang
8a52d1a9d5 6578647: Undefined requesting URL in java.net.Authenticator.getPasswordAuthentication()
Reviewed-by: chegar, valeriep
2009-06-09 14:17:05 +08:00
Weijun Wang
5c6f569aa5 6765491: Krb5LoginModule a little too restrictive, and the doc is not clear
Reviewed-by: valeriep
2008-11-12 16:01:06 +08:00
Weijun Wang
d9d3a81168 6761072: new krb5 tests fail on multiple platforms
Reviewed-by: xuelei
2008-10-20 10:32:33 +08:00
Weijun Wang
f134b5139a 6706974: Add krb5 test infrastructure
Reviewed-by: valeriep
2008-10-17 13:02:00 +08:00