Kerberos Module Release Notes

Kerberos proxy authentication no longer fails when the proxy requires the standard HTTP/host@REALM service principal. The service principal name is now built using the Kerberos principal name type, so authentication succeeds against proxies that expect the standard service principal name form.

W-22844997

Proxy authentication no longer fails intermittently on reused (keep-alive) connections, where repeated requests over the same connection could alternate between success and failure.

W-23384507

Proxy authentication no longer fails when the proxy returns the Negotiate authentication scheme in non-standard letter casing. The scheme is now recognized regardless of casing.

W-23384757

Mule

4.12.2 and later

HTTP Connector

1.11.0 and later

OpenJDK

17

Netty HTTP Service

0.5.2 and later

Mule

4.10.0 and later

HTTP Connector

1.11.0 and later

OpenJDK

17

Netty HTTP Service

0.3.0 and later