On Jul 8, 2014, at 17:20, Michael-O <1983-01...@gmx.net> wrote: > Hi Max, > > are you going to backport this to Java 7?
I would be glad to do that. But now I still cannot find anyone code reviewing it for JDK 9. > We are suffering from this on a regular basis because several KDCs are faulty > returned by DNS SRVs. 30 s is not acceptable. Moreover, why is the property > krb5.kdc.bad.policy not documented publicly? Sorry, we didn't have a good place to document krb5-related things. The Java SE document always focuses on GSS-API. I think it was mentioned in release notes of JDK 7. We have http://docs.oracle.com/javase/8/docs/technotes/guides/security/jgss/jgss-api-mechanism.html now and hopefully we can put some useful information there. Thanks Max > > Thanks, > > Michael