[java-shib-idp2 COMMIT] in /branches/REL_2: doc/RELEASE-NOTES.txt src/installer/resources/conf-tmpl/login.config

[noreply at shibboleth.net]

Author: scantor
Date: Mon Aug  4 22:03:12 2014
New Revision: 3183

URL: http://svn.shibboleth.net/view/java-shib-idp2?rev=3183&view=rev
Log:
SIDP-607 -  Incorrect/misleading Kerberos authentication example in login.config

Modified:
    branches/REL_2/doc/RELEASE-NOTES.txt
    branches/REL_2/src/installer/resources/conf-tmpl/login.config

Modified: branches/REL_2/doc/RELEASE-NOTES.txt
URL: http://svn.shibboleth.net/view/java-shib-idp2/branches/REL_2/doc/RELEASE-NOTES.txt?rev=3183&r1=3182&r2=3183&view=diff
==============================================================================
--- branches/REL_2/doc/RELEASE-NOTES.txt (original)
+++ branches/REL_2/doc/RELEASE-NOTES.txt Mon Aug  4 22:03:12 2014
@@ -8,7 +8,8 @@
 =============================================
 Also, updating POM to implement:
 [JXT-106] - Update Apache Santuario (xmlsec) to 1.5.6
-[SIDP-600] - Make the inbound message issuer (SP's entity ID) available to logout.jsp 
+[SIDP-600] - Make the inbound message issuer (SP's entity ID) available to logout.jsp
+[SIDP-607] - Incorrect/misleading Kerberos authentication example in login.config 
 
 Changes in Release 2.4.0
 =============================================

Modified: branches/REL_2/src/installer/resources/conf-tmpl/login.config
URL: http://svn.shibboleth.net/view/java-shib-idp2/branches/REL_2/src/installer/resources/conf-tmpl/login.config?rev=3183&r1=3182&r2=3183&view=diff
==============================================================================
--- branches/REL_2/src/installer/resources/conf-tmpl/login.config (original)
+++ branches/REL_2/src/installer/resources/conf-tmpl/login.config Mon Aug  4 22:03:12 2014
@@ -34,12 +34,11 @@
       userFilter="uid={0}";
 */
 
-// Example Kerberos authentication, requires Sun's JVM
-// See: https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAuthUserPass
+// Example Kerberos authentication, requires Oracle's JVM or OpenJDK.
+// Warning: The module does not support verifying the KDC using a keytab.
+// See: https://spaces.internet2.edu/display/SHIB2/IdPAuthUserPass
 /*
-   com.sun.security.auth.module.Krb5LoginModule required
-      useKeyTab="true"
-      keyTab="/path/to/idp/keytab/file";
+   com.sun.security.auth.module.Krb5LoginModule required;
 */
 
 };