Author: markt
Date: Mon Nov 11 09:49:19 2013
New Revision: 1540649
URL: http://svn.apache.org/r1540649
Log:
Remove unnecessary setting of property that causes problems whe using SPNEGO
with IBM JDKs.
Modified:
tomcat/tc7.0.x/trunk/ (props changed)
tomcat/tc7.0.x/trunk/java/org/apache/catalina/authenticator/SpnegoAuthenticator.java
tomcat/tc7.0.x/trunk/webapps/docs/changelog.xml
Propchange: tomcat/tc7.0.x/trunk/
------------------------------------------------------------------------------
Merged /tomcat/trunk:r1540647
Modified:
tomcat/tc7.0.x/trunk/java/org/apache/catalina/authenticator/SpnegoAuthenticator.java
URL:
http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/java/org/apache/catalina/authenticator/SpnegoAuthenticator.java?rev=1540649&r1=1540648&r2=1540649&view=diff
==============================================================================
---
tomcat/tc7.0.x/trunk/java/org/apache/catalina/authenticator/SpnegoAuthenticator.java
(original)
+++
tomcat/tc7.0.x/trunk/java/org/apache/catalina/authenticator/SpnegoAuthenticator.java
Mon Nov 11 09:49:19 2013
@@ -126,9 +126,6 @@ public class SpnegoAuthenticator extends
System.setProperty(Constants.JAAS_CONF_PROPERTY,
jaasConfFile.getAbsolutePath());
}
-
- // This property must be false for SPNEGO to work
- System.setProperty(Constants.USE_SUBJECT_CREDS_ONLY_PROPERTY, "false");
}
Modified: tomcat/tc7.0.x/trunk/webapps/docs/changelog.xml
URL:
http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/webapps/docs/changelog.xml?rev=1540649&r1=1540648&r2=1540649&view=diff
==============================================================================
--- tomcat/tc7.0.x/trunk/webapps/docs/changelog.xml (original)
+++ tomcat/tc7.0.x/trunk/webapps/docs/changelog.xml Mon Nov 11 09:49:19 2013
@@ -117,6 +117,13 @@
<code>javax.websocket.server.ServerEndpointConfig$Configurator</code>
implementation. (violetagg)
</fix>
+ <fix>
+ <bug>55760</bug>: Remove the unnecessary setting of the
+ <code>javax.security.auth.useSubjectCredsOnly</code> system property in
+ the <code>SpnegoAuthenticator</code> as in addition to it being
+ unnecessary, it causes problems with using SPENGO with IBM JDKs. Patch
+ provided by Arunav Sanyal. (mark)
+ </fix>
</changelog>
</subsection>
<subsection name="Coyote">
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org
