6716534: Krb5LoginModule has not cleaned temp info between authentication attempts
Reviewed-by: valeriep
--- a/jdk/src/share/classes/com/sun/security/auth/module/Krb5LoginModule.java Thu Jun 19 14:20:43 2008 -0400
+++ b/jdk/src/share/classes/com/sun/security/auth/module/Krb5LoginModule.java Fri Jun 20 12:05:02 2008 +0800
@@ -1,5 +1,5 @@
/*
- * Copyright 2000-2006 Sun Microsystems, Inc. All Rights Reserved.
+ * Copyright 2000-2008 Sun Microsystems, Inc. All Rights Reserved.
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
*
* This code is free software; you can redistribute it and/or modify it
@@ -1145,6 +1145,10 @@
sharedState.put(NAME, username);
sharedState.put(PWD, password);
}
+ } else {
+ // remove temp results for the next try
+ encKeys = null;
+ principal = null;
}
username = null;
password = null;