There are 3 manual GSS-API/Kerberos tests that require a manual setup and were 
added to the problem list years ago:

- com/sun/security/sasl/gsskerb/**AuthOnly**-> Verifies that both client and 
server have completed the authentication process.
- com/sun/security/sasl/gsskerb/**NoSecurityLayer** -> Attempts to use wrap and 
unwrap to demonstrate that these operations should not be allowed without a 
negotiated security layer.
- com/sun/security/sasl/gsskerb/**ConfSecurityLayer** -> Demonstrates the use 
of the security layer by wrapping and unwrapping messages on both client and 
server sides.

These tests need manual setup of a KDC environment, service/user principals, 
keytabs, JAAS configuration, and script adjustments. All that is time consuming 
and error prone.

In contrast, the automated test sun/security/krb5/auto/**SaslBasic** already 
covers these scenarios and sets up the KDC with the necessary principals 
**automatically**, no manual setup is required. 
I've enhanced SaslBasic to include additional wrap/unwrap checks with and 
without a security layer. As a result, the 3 manual tests and their associated 
files are now redundand and can be removed, as they no longer provide 
additional value.

-------------

Commit messages:
 - refactoring
 - Merge branch 'master' into 8337723
 - remov gsskerb tests

Changes: https://git.openjdk.org/jdk/pull/20464/files
  Webrev: https://webrevs.openjdk.org/?repo=jdk&pr=20464&range=00
  Issue: https://bugs.openjdk.org/browse/JDK-8337723
  Stats: 887 lines in 12 files changed: 56 ins; 817 del; 14 mod
  Patch: https://git.openjdk.org/jdk/pull/20464.diff
  Fetch: git fetch https://git.openjdk.org/jdk.git pull/20464/head:pull/20464

PR: https://git.openjdk.org/jdk/pull/20464

Reply via email to