You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
We use kerb4j successfully (thanks!) but the kerb4j-common library keeps coming up on thirdparty version and security issue reviews in our company.
I looked into the dependencies and the very large dependency tree of kerb4j-common is caused by it dependending on org.apache.kerby:kerb-simplekdc. This appears to be a KDC test server implementation that has a bunch of additional dependencies.
kerb4j-common only needs these dependencies for unit tests.
I have locally cloned the kerb4j repository and and set the dependency to <scope>test</scope> for kerb4j-common and I have additionally added the dependency (as a test dependency) to the following projects:
kerb4j-client
kerb4j-server-spring-security
kerb4j-server-tomcat
After this change, a mvn clean install on the current master version builds and tests fine.
The text was updated successfully, but these errors were encountered:
We use kerb4j successfully (thanks!) but the kerb4j-common library keeps coming up on thirdparty version and security issue reviews in our company.
I looked into the dependencies and the very large dependency tree of kerb4j-common is caused by it dependending on
org.apache.kerby:kerb-simplekdc
. This appears to be a KDC test server implementation that has a bunch of additional dependencies.kerb4j-common only needs these dependencies for unit tests.
I have locally cloned the kerb4j repository and and set the dependency to
<scope>test</scope>
for kerb4j-common and I have additionally added the dependency (as a test dependency) to the following projects:After this change, a
mvn clean install
on the current master version builds and tests fine.The text was updated successfully, but these errors were encountered: