This is an automated email from the ASF dual-hosted git repository.
ijuma pushed a commit to branch trunk
in repository https://gitbox.apache.org/repos/asf/kafka.git
The following commit(s) were added to refs/heads/trunk by this push:
new 5651729 KAFKA-7338: Specify AES128 default encryption type for
Kerberos tests (#5586)
5651729 is described below
commit 5651729038406733d7ecd28430b2774473928d29
Author: Rajini Sivaram <[email protected]>
AuthorDate: Thu Aug 30 16:19:34 2018 +0100
KAFKA-7338: Specify AES128 default encryption type for Kerberos tests
(#5586)
Java 11 enables aes128-cts-hmac-sha256-128 and aes256-cts-hmac-sha384-192
by default. These are not supported in earlier versions of Java and not
supported by Apache DS libraries used by MiniKdc. To ensure that the default
kerberos configuration used by Kafka integration and system tests work with all
versions of Java 8 and above, configure default_tkt_enctypes and
default_tgs_enctypes to use aes128-cts-hmac-sha1-96.
Reviewers: Ismael Juma <[email protected]>
---
core/src/test/resources/minikdc-krb5.conf | 2 ++
1 file changed, 2 insertions(+)
diff --git a/core/src/test/resources/minikdc-krb5.conf
b/core/src/test/resources/minikdc-krb5.conf
index 0603404..20f1be5 100644
--- a/core/src/test/resources/minikdc-krb5.conf
+++ b/core/src/test/resources/minikdc-krb5.conf
@@ -18,6 +18,8 @@
[libdefaults]
default_realm = {0}
udp_preference_limit = 1
+default_tkt_enctypes=aes128-cts-hmac-sha1-96
+default_tgs_enctypes=aes128-cts-hmac-sha1-96
[realms]
{0} = '{'
