Hi Valerie

Webrev updated:

  http://cr.openjdk.java.net/~weijun/8012615/webrev.02

Except for some comment, the only real source change is in Realm::parseCapaths:

-        if (!cfg.exists("capaths", cRealm)) {
+        if (!cfg.exists("capaths", cRealm, sRealm)) {
             throw new KrbException("No conf");
         }

So this means only when both the sub-section and key exist, capaths is used. Otherwise, hierarchy is used. This is to be consistent with MIT krb5 style.

So a test case is also updated, for

   C1.COM = {
       C3.COM = C2.COM
   }

The path from C1.COM to C2.COM is no longer C1.COM->C2.COM, but C1.COM->COM->C2.COM.

Thanks
Max

Reply via email to