Uploaded image for project: 'MariaDB Connector/J'
  1. MariaDB Connector/J
  2. CONJ-1354

Replace JGSS implementation to use native GSS-API where available

    XMLWordPrintable

Details

    • Task
    • Status: Closed (View Workflow)
    • Major
    • Resolution: Fixed
    • None
    • 4.0.0
    • Other
    • None

    Description

      Since JDK 12 (and backported to 8u371+ = April 2023), the JDK ships its own native GSS-API bridge for Windows (SSPI-backed), giving Kerberos/SPNEGO single sign-on without a third-party library.

      The connector currently only supports this via waffle-jna (JAAS/Krb5LoginModule-based) or falls back to a pure-Java ticket-cache implementation that can't do true Windows SSO.
      This targets 3.6 to re-evaluate the GSSAPI authentication path, favoring the JDK's built-in native bridge where the runtime supports it, reducing reliance on the third-party dependency.

      Attachments

        Activity

          People

            diego dupin Diego Dupin
            diego dupin Diego Dupin
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Git Integration

                Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.