Outcome of :test() opeartion is different for jdk1.6 and jdk1.7. Since there is no documentation I cannot say which is correct. However behavior should be same when same configuration is used. Calling test operation in CLI on wrong keytab: For jdk 1.7: /core-service=management/security-realm=KrbKeyTab/server-identity=kerberos/keytab=HTTP\/localhost:test() { "outcome" => "success", "result" => {"subject" => "Subject: Principal: HTTP/localhost Private Credential: /home/olukas/workspace/testing/EAP6-253/krb_dir/httpwrong.keytab "} } For jdk 1.6: /core-service=management/security-realm=KrbKeyTab/server-identity=kerberos/keytab=HTTP\/localhost:test() { "outcome" => "failed", "failure-description" => "JBAS021008: Unable to obtain Kerberos TGT", "rolled-back" => true } Please also clarify which of these outcomes is correct.
Both are correct, the response for the operation is only reflecting back how the JDK is handling that specific scenario, for Java 6 the JDK reports an error, for Java 7 the JDK just adds the Keytab as a private credential but does not obtain and add any Kerberos tickets.
Ok, thanks for clarification. For that reason I close this issue as not a bug. However this behavior can be confusing for customers and for that reason it has to mentioned in documentation. I add it to BZ#1139934.
John Doyle <jdoyle> updated the status of jira EAP6-253 to Closed