Re: [Bug] javax.security.auth.kerberos.KeyTab returns unrequested keys

2024-05-13 Thread Osipov, Michael (IN IT IN)
On 2024-05-09 00:13, Wei-Jun Wang wrote: Hi Michael, I've filed https://bugs.openjdk.org/browse/JDK-8331975. I plan to introduce a system property to control the string comparison mode. In my earlier reply I mentioned fixing keytab entry lookup no matter how the comparison is done. I did some

Re: [Bug] javax.security.auth.kerberos.KeyTab returns unrequested keys

2024-05-13 Thread Osipov, Michael (IN IT IN)
That's totally fine, thank you. There is a typo in JDK-8331976: environemnt On 2024-05-09 00:13, Wei-Jun Wang wrote: Hi Michael, I've filed https://bugs.openjdk.org/browse/JDK-8331975. I plan to introduce a system property to control the string comparison mode. In my earlier reply I mentione

Re: [Bug] javax.security.auth.kerberos.KeyTab returns unrequested keys

2024-05-08 Thread Wei-Jun Wang
Hi Michael, I've filed https://bugs.openjdk.org/browse/JDK-8331975. I plan to introduce a system property to control the string comparison mode. In my earlier reply I mentioned fixing keytab entry lookup no matter how the comparison is done. I did some evaluation and the code change will be qui

Re: [Bug] javax.security.auth.kerberos.KeyTab returns unrequested keys

2024-05-07 Thread Wei-Jun Wang
I'm thinking of the opposite. > On May 6, 2024, at 3:59 PM, Osipov, Michael (IN IT IN) > wrote: > > On 2024-05-06 21:55, Wei-Jun Wang wrote: >> Hi Michael, >> Thanks for the report. It seems not conforming to the RFC strictly >> but I hesitate to make a change now. >> The getKeys() method uses

Re: [Bug] javax.security.auth.kerberos.KeyTab returns unrequested keys

2024-05-07 Thread Osipov, Michael (IN IT IN)
That be fine. New Java version restores RFC behavior and property can bring back old case-insensitive behavior. Michael On 2024-05-06 22:03, Wei-Jun Wang wrote: I'll probably pick #2 if you also like it. On May 6, 2024, at 3:59 PM, Osipov, Michael (IN IT IN) wrote: On 2024-05-06 21:55, We

Re: [Bug] javax.security.auth.kerberos.KeyTab returns unrequested keys

2024-05-06 Thread Wei-Jun Wang
I'll probably pick #2 if you also like it. > On May 6, 2024, at 3:59 PM, Osipov, Michael (IN IT IN) > wrote: > > On 2024-05-06 21:55, Wei-Jun Wang wrote: >> Hi Michael, >> Thanks for the report. It seems not conforming to the RFC strictly >> but I hesitate to make a change now. >> The getKeys()

Re: [Bug] javax.security.auth.kerberos.KeyTab returns unrequested keys

2024-05-06 Thread Osipov, Michael (IN IT IN)
On 2024-05-06 21:55, Wei-Jun Wang wrote: Hi Michael, Thanks for the report. It seems not conforming to the RFC strictly but I hesitate to make a change now. The getKeys() method uses the PrincipalName.match() method to compare principal names in case-insensitive style. The same method is also u

Re: [Bug] javax.security.auth.kerberos.KeyTab returns unrequested keys

2024-05-06 Thread Wei-Jun Wang
Hi Michael, Thanks for the report. It seems not conforming to the RFC strictly but I hesitate to make a change now. The getKeys() method uses the PrincipalName.match() method to compare principal names in case-insensitive style. The same method is also used to locate a ticket from a ccache fil

[Bug] javax.security.auth.kerberos.KeyTab returns unrequested keys

2024-05-06 Thread Osipov, Michael (IN IT IN)
Folks, consider the following code: KeyTab keytab = KeyTab.getUnboundInstance(new File("...")); KerberosPrincipal principal = new KerberosPrincipal("foo$", KerberosPrincipal.KRB_NT_PRINCIPAL); KerberosKey[] keys = keytab.getKeys(principal); Let's check the keytab for etype 18 only: 10 2022