Re: RFR 6722928: Support SSPI as a native GSS-API provider

2019-01-16 Thread Christos Zoulas
On Jan 17, 12:04am, weijun.w...@oracle.com (Weijun Wang) wrote: -- Subject: Re: RFR 6722928: Support SSPI as a native GSS-API provider | Hi Nico, | | Can you provide more explanation on below? I have't touched C/C++ for quite= | some time and I really forgot what extern "C" is for. I included it

Re: Code Review Request, JDK-8159009: Useless ExemptionMechanism.finalize() implementation

2016-07-09 Thread Christos Zoulas
On Jul 9, 10:22am, xuelei@oracle.com (Xuelei Fan) wrote: -- Subject: Code Review Request, JDK-8159009: Useless ExemptionMechanism.fina | Hi, | | Please review this simple code cleanup: | |http://cr.openjdk.java.net/~xuelei/8159009/webrev.00/ | | The javax.crypto.ExemptionMechanism.final

Re: RFR 8052412: Too many DNS requests for KDC setttings

2014-08-03 Thread Christos Zoulas
On Aug 4, 11:27am, xuelei@oracle.com (Xuelei Fan) wrote: -- Subject: Re: RFR 8052412: Too many DNS requests for KDC setttings | On 8/4/2014 11:25 AM, Wang Weijun wrote: | > | > On Aug 4, 2014, at 11:14, Xuelei Fan wrote: | > | >> It's not common but the DNS records of KDC may be updated. T

Re: RFR 8036779: sun.security.krb5.KdcComm interprets kdc_timeout asmsec instead of sec

2014-05-18 Thread Christos Zoulas
On May 18, 10:06am, weijun.w...@oracle.com (Wang Weijun) wrote: -- Subject: Re: RFR 8036779: sun.security.krb5.KdcComm interprets kdc_timeout | How about this? I will support "s" and "ms" units ("ms" is not defined by o= | ther vendors though). But will still try to be a little smart when there is

Re: 答复: RFR 8036779: sun.security.krb5.KdcComm interprets kdc_timeout asmsec instead of sec

2014-05-14 Thread Christos Zoulas
On May 14, 2:04pm, weijun.w...@oracle.com (Weijun Wang) wrote: -- Subject: =?utf-8?Q?=E7=AD=94=E5=A4=8D:_RFR_8036779:_sun.security.krb5.KdcC | What do you mean by detecting the platform? So if I find the file is also u= | sed by NetBSD krb5 then I treat it as second and if not millisecond? That's

Re: Review Request of JDK Enhancement Proposal: DTLS

2014-03-22 Thread Christos Zoulas
On Mar 22, 9:39am, mh...@mhcomputing.net (Matthew Hall) wrote: -- Subject: Re: Review Request of JDK Enhancement Proposal: DTLS | Sorry about the hiccup. Supposedly the bug will work if you get in with user guest PW guest. Thanks. christos

Re: Review Request of JDK Enhancement Proposal: DTLS

2014-03-22 Thread Christos Zoulas
On Mar 21, 11:48pm, mh...@mhcomputing.net (Matthew Hall) wrote: -- Subject: Re: Review Request of JDK Enhancement Proposal: DTLS | The following bug and source code [1] are present in OpenSSL: | | http://rt.openssl.org/Ticket/Display.html?id=1929 This link is not public. Can you post a summary?

Re: Review Request of JDK Enhancement Proposal: DTLS

2014-03-21 Thread Christos Zoulas
On Mar 22, 7:38am, xuelei@oracle.com (Xuelei Fan) wrote: -- Subject: Re: Review Request of JDK Enhancement Proposal: DTLS | Networking experts, any suggestion? I have not seen pmtu exposed at the application layer before. Has anyone else? christos | | Xuelei | | On 3/21/2014 8:28 AM, Mat

RE: "_" in dNSName? (was Re: [Bug 100298] New: keytool and SANs (DNS types))

2013-02-06 Thread Christos Zoulas
On Feb 6, 3:54pm, walter.h...@crinj.com (Walter Holm) wrote: -- Subject: RE: "_" in dNSName? (was Re: [Bug 100298] New: keytool and SANs ( FYI, bind-9 warns about "_" in the names, but accepts them. Windows Domain controllers create "_" names. I think they should be accepted on the principle be l

Re: Code review request: 8001208: Fix for KRB5CCNAME not complete

2012-10-22 Thread Christos Zoulas
On Oct 22, 2:38pm, weijun.w...@oracle.com (Weijun Wang) wrote: -- Subject: Code review request: 8001208: Fix for KRB5CCNAME not complete | Please take a look at | | http://cr.openjdk.java.net/~weijun/8001208/webrev.00/ | | An old test is enhanced to check for the fix. | | Honestly, it migh

Re: bug fix for native kerberos libraries

2012-10-22 Thread Christos Zoulas
On Oct 22, 1:06pm, weijun.w...@oracle.com (Weijun Wang) wrote: -- Subject: Re: bug fix for native kerberos libraries | But are you using MEMORY: type ccache in your case? If I understand | correctly, the substring after MEMORY: is not a normal file name. It's a | tag that links to a block of by

Re: bug fix for native kerberos libraries

2012-10-21 Thread Christos Zoulas
On Oct 22, 11:33am, weijun.w...@oracle.com (Weijun Wang) wrote: -- Subject: Re: bug fix for native kerberos libraries | I forgot to ask: | | Your patch mentioned MEMORY: ccache. What is the full string? Is that | any document on it? It was in my patch: > + * http://docs.oracle

Re: bug fix for native kerberos libraries

2012-10-21 Thread Christos Zoulas
On Oct 22, 10:54am, weijun.w...@oracle.com (Weijun Wang) wrote: -- Subject: Re: bug fix for native kerberos libraries | I see. So it looks like the MS tool is calling JAAS. Is it asking you to | prepare a JAAS login file like this? | | client { |com.sun.security.auth.module.Krb5Login

Re: bug fix for native kerberos libraries

2012-10-21 Thread Christos Zoulas
On Oct 22, 8:17am, weijun.w...@oracle.com (Weijun Wang) wrote: -- Subject: Re: bug fix for native kerberos libraries | You are still using JAAS? There is no need to call Krb5LoginModule or | read credentials cache yourself if you are using native kerberos. Just | call JGSS APIs directly. | | T

Re: bug fix for native kerberos libraries

2012-10-19 Thread Christos Zoulas
On Oct 19, 8:50am, chris...@zoulas.com (Christos Zoulas) wrote: -- Subject: Re: bug fix for native kerberos libraries Hi Weijun, I verified that setting -Djavax.security.auth.useSubjectCredsOnly=false fixes this issue, but then unless I brought in my other patch from jdk6, I get

Re: bug fix for native kerberos libraries

2012-10-19 Thread Christos Zoulas
On Oct 19, 9:11am, weijun.w...@oracle.com (Weijun Wang) wrote: -- Subject: Re: bug fix for native kerberos libraries | Hi Christos | | You mean the exception thrown in NativeGSSFactory.java lines 52-60? | | Vector creds = GSSUtil.searchSubject | (name, mech, initiate, GSSC