On Jul 8, 2014, at 17:20, Michael-O <1983-01...@gmx.net> wrote:

> Hi Max,
> 
> are you going to backport this to Java 7?

I would be glad to do that. But now I still cannot find anyone code reviewing 
it for JDK 9.

> We are suffering from this on a regular basis because several KDCs are faulty 
> returned by DNS SRVs. 30 s is not acceptable. Moreover, why is the property 
> krb5.kdc.bad.policy not documented publicly?

Sorry, we didn't have a good place to document krb5-related things. The Java SE 
document always focuses on GSS-API. I think it was mentioned in release notes 
of JDK 7.

We have 
http://docs.oracle.com/javase/8/docs/technotes/guides/security/jgss/jgss-api-mechanism.html
 now and hopefully we can put some useful information there.

Thanks
Max

> 
> Thanks,
> 
> Michael

Reply via email to