JDK-8327618 : RMIConnectionImpl should remove AccessControlContext and JMXSubjectDomainCombiner usage.
  • Type: Enhancement
  • Component: core-svc
  • Sub-Component: javax.management
  • Priority: P3
  • Status: Closed
  • Resolution: Not an Issue
  • Submitted: 2024-03-07
  • Updated: 2025-01-02
  • Resolved: 2024-11-13
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 24
24Resolved
Related Reports
Blocks :  
JDK-8326666 - Remove the Java Management Extension (JMX) Subject Delegation feature
Relates :  
JDK-8296244 - Alternate implementation of user-based authorization Subject APIs that doesn’t depend on Security Manager APIs
Description
JMX RMIConnectionImpl (src/java.management.rmi/share/classes/javax/management/remote/rmi/RMIConnectionImpl.java) uses APIs deprecated for removal as part of JEP 411.

It already has the authenticated Subject, if any, and with the removal of Subject Delegation we should be able to remove JMXSubjectDomainCombiner and use of AccessControlContext.
Comments
This change is no longer required, JDK-8338411 has removed the storing of an AccessControlContext and use of JMXSubjectDomainCombiner. There will be further cleanup in this module more generally.
13-11-2024