JDK-8048073 : Cannot read ccache entry with a realm-less service name
  • Type: Bug
  • Component: security-libs
  • Sub-Component: org.ietf.jgss:krb5
  • Affected Version: 8,9
  • Priority: P3
  • Status: Closed
  • Resolution: Fixed
  • Submitted: 2014-06-25
  • Updated: 2015-01-21
  • Resolved: 2014-06-25
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
8u40Fixed 9 b22Fixed
A ccache file could contain an entry whose service name has no realm info (most likely for kerberos referral), but in Java, every PrincipalName must have a realm since JDK 8. Such entry is useless to Java and we should ignore it. Currently an exception is thrown which means other useful entries will not get used.
Code looks good, And the test cover the fix and pass in nightly result: http://aurora.ru.oracle.com/functional/faces/RunDetails.xhtml?names=632205.CORELIBS-JDK-NIGHTLY-JTREG-16