Hi All Please review the fix at
http://cr.openjdk.java.net/~weijun/8012615/webrev.00/Basically, the algorithm to calculate cross-realm authentication path is totally rewritten to be *correct*. This includes both the hierarchy codes and capaths codes.
You are welcomed to read this blog post for more info: https://blogs.oracle.com/wangwj/entry/re_read_capaths Thanks Max