Check for configuration changes related to the com.ibm.security.auth.module.Krb5LoginModule class

The following classes will be flagged as a warning that configuration changes might be needed:

Previously, SPNEGO was only supported with the IBM Java Development Kit. Starting Java 8, SPNEGO will be supported with the Oracle Java Development Kit. However, starting in Java 11, SPNEGO is only supported with the Oracle Java Development Kit and OpenJDK. Users of SPNEGO must review their Liberty server.xml or jaas.config files for any IBM Java Development Kit Krb5LoginModule specific configuration. Changes to the configuration for SPNEGO might be necessary. The following chart shows a few IBM Java Development Kit specific SPNEGO configuration options and their Oracle equivalents. Not all of the following configuration options map directly to each other, but they provide similar functionality:

Java 8 and Earlier Java 11
credsType: initiator|acceptor|both
(default=initiator)		 isInitiator: true|false
renewable: true|false
(default=false)		 renewTGT: true|false
useKeyTab: URL String useKeyTab: true|false
Set to true for the module to get the principal's key from the keytab
useDefaultKeyTab: true|false
(default=false)		 keyTab: Filename String
Set to the name of the keytab file
useCcache: URL String
useDefaultCcache: true|false
(default=false)		 useTicketCache: true|false
Set to true for the TGT to be obtained from the ticket cache
ticketCache: Ticket Cache Name String
No support refreshKrb5Config: true|false
Set to true for the configuration to be refreshed before the login method is called.
No support storeKey: true|false
Set to true to store the keytab or principal's key in the subjects private credentials

The javax.security.auth.login.LoginContext class can be used in conjunction with security specifications other than SPNEGO. Use of this class does not guarantee that you will need to make configuration changes. However, if used in conjunction with SPNEGO configuration, changes might be necessary.

For more information on the com.sun.security.auth.module.Krb5LoginModule , see the Javadoc. For more information on the com.ibm.security.auth.module.Krb5LoginModule , see the Javadoc.