JDK-6951366 : kerberos login failure on win2008 with AD set to win2000 compat mode
  • Type: Bug
  • Component: security-libs
  • Sub-Component: org.ietf.jgss:krb5
  • Affected Version: 5.0u11
  • Priority: P3
  • Status: Closed
  • Resolution: Fixed
  • OS: windows_2008
  • CPU: x86
  • Submitted: 2010-05-11
  • Updated: 2011-03-07
  • Resolved: 2011-03-07
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
Other JDK 6 JDK 7
5.0u29Fixed 6u25Fixed 7 b100Fixed
Related Reports
Relates :  
Relates :  
Description
When CU application tries user authentification in com.sun.security.auth.module.Krb5LoginModule,
that fails under the following condition.

- Under Windows Server 2008 or Windows Server 2008 R2
- When ActiveDirectory is constructed, the domain functional level is set to 2000 or 2003.
- The client side of Kerberos uses Krb5LoginModule in jdk5u11.
- The setting of Kerberos enctypes is set to default value.(Not to specify any value explicitly)

REPRODUCE:
1) To set jaaskrb.conf and krb5.conf to c:\tmp\
2) To open krb5.conf and change the inf. of default_realm and [realms] to 
   inf. of the authentification server.
3) To Execute KrbSample.java and input user name and password

Comments
EVALUATION This fix is further enhanced in 6959292, to be interoperable with Windows 2000.
01-07-2010

EVALUATION This is a new fix for 6932525 (http://hg.openjdk.java.net/jdk7/tl/jdk/rev/ba95fd03440b), which also covers login with keytab file. A new regression test is added. When backporting this fix to previous versions, there is no need to read the previous fix for 6932525.
04-06-2010

EVALUATION http://hg.openjdk.java.net/jdk7/tl/jdk/rev/ea8c57ec8409
04-06-2010