Re: bug fix for native kerberos libraries

2012-10-22 Thread Christos Zoulas
On Oct 22, 1:06pm, weijun.w...@oracle.com (Weijun Wang) wrote: -- Subject: Re: bug fix for native kerberos libraries | But are you using MEMORY: type ccache in your case? If I understand | correctly, the substring after MEMORY: is not a normal file name. It's a | tag that links to a blo

Re: bug fix for native kerberos libraries

2012-10-21 Thread Weijun Wang
eijun On 10/22/2012 12:10 PM, chris...@zoulas.com wrote: On Oct 22, 11:33am, weijun.w...@oracle.com (Weijun Wang) wrote: -- Subject: Re: bug fix for native kerberos libraries | I forgot to ask: | | Your patch mentioned MEMORY: ccache. What is the full string? Is that | any document on it? It

Re: bug fix for native kerberos libraries

2012-10-21 Thread Christos Zoulas
On Oct 22, 11:33am, weijun.w...@oracle.com (Weijun Wang) wrote: -- Subject: Re: bug fix for native kerberos libraries | I forgot to ask: | | Your patch mentioned MEMORY: ccache. What is the full string? Is that | any document on it? It was in my patch: > + * h

Re: bug fix for native kerberos libraries

2012-10-21 Thread Weijun Wang
: -- Subject: Re: bug fix for native kerberos libraries | I see. So it looks like the MS tool is calling JAAS. Is it asking you to | prepare a JAAS login file like this? | | client { |com.sun.security.auth.module.Krb5LoginModule required |...; | }; | | You can put a key-value pair

Re: bug fix for native kerberos libraries

2012-10-21 Thread Weijun Wang
On 10/22/2012 11:10 AM, chris...@zoulas.com wrote: On Oct 22, 10:54am, weijun.w...@oracle.com (Weijun Wang) wrote: -- Subject: Re: bug fix for native kerberos libraries | I see. So it looks like the MS tool is calling JAAS. Is it asking you to | prepare a JAAS login file like this

Re: bug fix for native kerberos libraries

2012-10-21 Thread Christos Zoulas
On Oct 22, 10:54am, weijun.w...@oracle.com (Weijun Wang) wrote: -- Subject: Re: bug fix for native kerberos libraries | I see. So it looks like the MS tool is calling JAAS. Is it asking you to | prepare a JAAS login file like this? | | client

Re: bug fix for native kerberos libraries

2012-10-21 Thread Weijun Wang
09:16 AM, chris...@zoulas.com wrote: On Oct 22, 8:17am, weijun.w...@oracle.com (Weijun Wang) wrote: -- Subject: Re: bug fix for native kerberos libraries | You are still using JAAS? There is no need to call Krb5LoginModule or | read credentials cache yourself if you are using native kerberos. J

Re: bug fix for native kerberos libraries

2012-10-21 Thread Christos Zoulas
On Oct 22, 8:17am, weijun.w...@oracle.com (Weijun Wang) wrote: -- Subject: Re: bug fix for native kerberos libraries | You are still using JAAS? There is no need to call Krb5LoginModule or | read credentials cache yourself if you are using native kerberos. Just | call JGSS APIs directly

Re: bug fix for native kerberos libraries

2012-10-21 Thread Weijun Wang
) wrote: -- Subject: Re: bug fix for native kerberos libraries Hi Weijun, I verified that setting -Djavax.security.auth.useSubjectCredsOnly=false fixes this issue, but then unless I brought in my other patch from jdk6, I get: javax.security.auth.login.LoginException: Unable to obtain Princpal Name

Re: bug fix for native kerberos libraries

2012-10-19 Thread Christos Zoulas
On Oct 19, 8:50am, chris...@zoulas.com (Christos Zoulas) wrote: -- Subject: Re: bug fix for native kerberos libraries Hi Weijun, I verified that setting -Djavax.security.auth.useSubjectCredsOnly=false fixes this issue, but then unless I brought in my other patch from jdk6, I get

Re: bug fix for native kerberos libraries

2012-10-19 Thread Christos Zoulas
On Oct 19, 9:11am, weijun.w...@oracle.com (Weijun Wang) wrote: -- Subject: Re: bug fix for native kerberos libraries | Hi Christos | | You mean the exception thrown in NativeGSSFactory.java lines 52-60? | | Vector creds = GSSUtil.searchSubject | (name, mech, initiate

Re: bug fix for native kerberos libraries

2012-10-18 Thread Weijun Wang
Hi Christos You mean the exception thrown in NativeGSSFactory.java lines 52-60? Vector creds = GSSUtil.searchSubject (name, mech, initiate, GSSCredElement.class); // If Subject is present but no native creds available if (creds != null && creds.isEmpty()) {

Re: bug fix for native kerberos libraries

2012-10-18 Thread Sean Mullan
(Forwarding to security-dev as this should be discussed in that group, not core-libs). On 10/18/12 5:02 PM, chris...@zoulas.com wrote: > Hello, > > This simple fix allows kerberos authentication to work with: > > -Dsun.security.jgss.native=true > > and microsoft's sqljdbc 4.0.2206.100 dr