kafka-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From ij...@apache.org
Subject [kafka] branch trunk updated: KAFKA-7338: Specify AES128 default encryption type for Kerberos tests (#5586)
Date Thu, 30 Aug 2018 15:19:50 GMT
This is an automated email from the ASF dual-hosted git repository.

ijuma pushed a commit to branch trunk
in repository https://gitbox.apache.org/repos/asf/kafka.git


The following commit(s) were added to refs/heads/trunk by this push:
     new 5651729  KAFKA-7338: Specify AES128 default encryption type for Kerberos tests (#5586)
5651729 is described below

commit 5651729038406733d7ecd28430b2774473928d29
Author: Rajini Sivaram <rajinisivaram@googlemail.com>
AuthorDate: Thu Aug 30 16:19:34 2018 +0100

    KAFKA-7338: Specify AES128 default encryption type for Kerberos tests (#5586)
    
    Java 11 enables aes128-cts-hmac-sha256-128 and aes256-cts-hmac-sha384-192 by default.
These are not supported in earlier versions of Java and not supported by Apache DS libraries
used by MiniKdc. To ensure that the default kerberos configuration used by Kafka integration
and system tests work with all versions of Java 8 and above, configure default_tkt_enctypes
and default_tgs_enctypes to use aes128-cts-hmac-sha1-96.
    
    Reviewers: Ismael Juma <ismael@juma.me.uk>
---
 core/src/test/resources/minikdc-krb5.conf | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/core/src/test/resources/minikdc-krb5.conf b/core/src/test/resources/minikdc-krb5.conf
index 0603404..20f1be5 100644
--- a/core/src/test/resources/minikdc-krb5.conf
+++ b/core/src/test/resources/minikdc-krb5.conf
@@ -18,6 +18,8 @@
 [libdefaults]
 default_realm = {0}
 udp_preference_limit = 1
+default_tkt_enctypes=aes128-cts-hmac-sha1-96
+default_tgs_enctypes=aes128-cts-hmac-sha1-96
 
 [realms]
 {0} = '{'


Mime
View raw message