src/java.security.jgss/share/classes/sun/security/krb5/Config.java

rev 54745 : 8215032: Support Kerberos cross-realm referrals (RFC 6806)
Reviewed-by: weijun

*** 1,7 ****
  /*
!  * Copyright (c) 2000, 2018, Oracle and/or its affiliates. All rights reserved.
   * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
   *
   * This code is free software; you can redistribute it and/or modify it
   * under the terms of the GNU General Public License version 2 only, as
   * published by the Free Software Foundation.  Oracle designates this
--- 1,7 ----
  /*
!  * Copyright (c) 2000, 2019, Oracle and/or its affiliates. All rights reserved.
   * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
   *
   * This code is free software; you can redistribute it and/or modify it
   * under the terms of the GNU General Public License version 2 only, as
   * published by the Free Software Foundation.  Oracle designates this
*** 46,63 ****
--- 46,99 ----
  
  import sun.net.dns.ResolverConfiguration;
  import sun.security.action.GetPropertyAction;
  import sun.security.krb5.internal.crypto.EType;
  import sun.security.krb5.internal.Krb5;
+ import sun.security.util.SecurityProperties;
  
  /**
   * This class maintains key-value pairs of Kerberos configurable constants
   * from configuration file or from user specified system properties.
   */
  
  public class Config {
  
+     /**
+      * {@systemProperty sun.security.krb5.disableReferrals} property
+      * indicating whether or not cross-realm referrals (RFC 6806) are
+      * enabled.
+      */
+     public static final boolean DISABLE_REFERRALS;
+ 
+     /**
+      * {@systemProperty sun.security.krb5.maxReferrals} property
+      * indicating the maximum number of cross-realm referral
+      * hops allowed.
+      */
+     public static final int MAX_REFERRALS;
+ 
+     static {
+         String disableReferralsProp =
+                 SecurityProperties.privilegedGetOverridable(
+                         "sun.security.krb5.disableReferrals");
+         if (disableReferralsProp != null) {
+             DISABLE_REFERRALS = "true".equalsIgnoreCase(disableReferralsProp);
+         } else {
+             DISABLE_REFERRALS = false;
+         }
+ 
+         int maxReferralsValue = 5;
+         String maxReferralsProp =
+                 SecurityProperties.privilegedGetOverridable(
+                         "sun.security.krb5.maxReferrals");
+         try {
+             maxReferralsValue = Integer.parseInt(maxReferralsProp);
+         } catch (NumberFormatException e) {
+         }
+         MAX_REFERRALS = maxReferralsValue;
+     }
+ 
      /*
       * Only allow a single instance of Config.
       */
      private static Config singleton = null;