With Java 11 now bundled in Confluence 7.3.x, Jira 8.6+, Jira Service Management 4.6+, and officially supported for Bamboo, and Fisheye additional configuration is required for EasySSO DNS-related code to work in NTLM and Kerberos authenticators.

We are investigating options with Atlassian and IOPLEX Jespa to have EasySSO work out of the box, but for now, the following workaround must be applied. 

Two values need to be added to the JVM startup parameters. See Configuring System Properties for how to do it.

-Datlassian.org.osgi.framework.bootdelegation.extra=com.sun.security.auth.*
--add-exports=jdk.naming.dns/com.sun.jndi.dns=java.naming


For Windows Service, please separate these (the example below is for Confluence):

Add to Java Options:

-Datlassian.org.osgi.framework.bootdelegation.extra=com.sun.security.auth.*

Add to Java 9 Options:

--add-exports=jdk.naming.dns/com.sun.jndi.dns=java.naming