From 4c03fb59afc2278e1ddc8c380239505a3e792f9a Mon Sep 17 00:00:00 2001 From: Mark Robert Miller Date: Tue, 13 Jan 2015 20:56:23 +0000 Subject: [PATCH] SOLR-6915: Add KeysFromKeyTab read permissions. git-svn-id: https://svn.apache.org/repos/asf/lucene/dev/trunk@1651487 13f79535-47bb-0310-9956-ffa450edef68 --- lucene/tools/junit4/tests.policy | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/lucene/tools/junit4/tests.policy b/lucene/tools/junit4/tests.policy index 8f085791871..c5968999b35 100644 --- a/lucene/tools/junit4/tests.policy +++ b/lucene/tools/junit4/tests.policy @@ -79,7 +79,11 @@ grant { // SASL/Kerberos related properties for Solr tests permission javax.security.auth.PrivateCredentialPermission "javax.security.auth.kerberos.KerberosTicket * \"*\"", "read"; + + // may only be necessary with Java 7? permission javax.security.auth.PrivateCredentialPermission "javax.security.auth.kerberos.KeyTab * \"*\"", "read"; + permission javax.security.auth.PrivateCredentialPermission "sun.security.jgss.krb5.Krb5Util$KeysFromKeyTab * \"*\"", "read"; + permission javax.security.auth.kerberos.ServicePermission "krbtgt/EXAMPLE.COM@EXAMPLE.COM", "initiate"; permission javax.security.auth.kerberos.ServicePermission "zookeeper/127.0.0.1@EXAMPLE.COM", "initiate"; permission javax.security.auth.kerberos.ServicePermission "zookeeper/127.0.0.1@EXAMPLE.COM", "accept";