On Fri, May 31, 2019 at 10:48:19PM +0800, Weijun Wang wrote: > > On May 31, 2019, at 3:09 AM, Nico Williams <nico.willi...@twosigma.com> > > wrote: > > Can you > > just use the empty realm like Heimdal and MIT do? > > This is for export(), where they use "WELLKNOWN:ORG.H5L.REFERALS-REALM" but I > hesitate to introduce it.
Heimdal defines that, but doesn't use it. MIT doesn't even define it. > > Ah, but if it's not the "current" realm? (What do you mean by "current" > > anyways?) > > Current is default, or USERDNSDOMAIN. > > Then I won't remove it and InitiateSecurityContext will use it. Hmm, ok. > > I would think JDK_SSPI_TRACE would be a better name... > > Yes, I can. OK. Nico --
