BUG Report : 'krb5.ini' not found on Windows.

[Weijun Wang]

On 05/18/2011 02:43 AM, Jeffrey Altman wrote:
> Application specific configuration files do not belong in \WINDOWS.
> The correct place for krb5.ini is \ProgramData\Kerberos\krb5.ini which
> requires that the environment variable KRB5_CONFIG be set to refer to
> that file.
>
> I do not know whether or not Java will pay attention to the environment
> variable.

We are not reading this environment variable, will consider adding it.

So, the logic will be

1. If java system property java.security.krb5.conf set, use it
2. If KRB5_CONFIG set, use it
3. If $JRE/lib/security/krb5.conf exists, use it
4. If Windows:
    a) If there is krb5.ini in GetWindowsDirectory, use it
    b) If there is krb5.ini in GetSystemWindowsDirectory, use it
    c) Use USERDNSDOMAIN and LOGONSERVER environment variables
5. If *nix:
    a) If Solaris, try /etc/krb5/krb5.conf
    b) Otherwise, try /etc/krb5.conf
    c) Use DNS

Thanks
Weijun

>
> Jeffrey Altman
>
>
> On 5/17/2011 6:53 AM, Onkesh Bansal wrote:
>> Hello,
>>
>>
>>
>> Configuration>>
>>
>>>>> Windows 2008 R2 (Service Pack 1) workstation.
>>
>>
>>
>> I am having this problem on my machine and am not able to figure out
>> what is the root cause.
>>
>> The scenario seems with Terminal Services installed on the system and
>> when the authentication has to be done via the LDAP over the local
>> network.
>>
>>
>> This BUG has been logged with ORACLE-JAVA at
>> http://bugs.sun.com/view_bug.do?bug_id=6793475 and they have already
>> provided with a work around.
>>
>> My Query is:
>>
>> 1.       What is the reason behind this bug. I need to know the root
>> cause for this.
>>
>> 2.       What should be my steps (apart from the workaround provided
>> with the bug resolution) so as to prevent any future re-occurrences?
>> ie I need a fix.
>>
>> 3.       Can it be related to the version changes of Kerberos or is it
>> because of Windows 2008?
>>
>>
>>
>> Thanks&  Regards,
>>
>> Onkesh Bansal
>>
>> Engineer-1 QA,
>>
>> Quark Media House (P) Ltd.
>>
>> obansal at quark.com
>>
>> ________________________________________________
>> Kerberos mailing list           Kerberos at mit.edu
>> https://mailman.mit.edu/mailman/listinfo/kerberos
>
>
>
> ________________________________________________
> Kerberos mailing list           Kerberos at mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos