Hi Valerie

I am working on breaking JGSS into modules and is now looking at 
sun/security/jgss/GSSUtil.java. There is a method

    public static <T extends GSSCredentialSpi> Vector<T>
            searchSubject(final GSSNameSpi name,
                          final Oid mech,
                          final boolean initiate,
                          final Class<? extends T> credCls) {

which goes inside a Subject's priv cred sets looking for GSSCredentialImpl 
objects. I searched thru other JDK codes and cannot see who is putting those 
objects there. Do you remember anything? Or we are thinking about applications 
putting them there? I cannot think of any such convention.

In fact, all I can see JAAS/JGSS/krb5 doing with a Subject is putting 
KerberosPrincipal into princ set and KerberosKey/KerberosTicket/KeyTab into 
priv cred set. Nothing else.

Thanks
Max

Reply via email to