With Java 17 now bundled in Confluence 8.3.x, Jira 9.5+, Bitbucket 8.8+, additional configuration is required for EasySSO DNS-related code to work in NTLM and Kerberos authenticators in EasySSO Versions prior to v4.13.0.
Three values need to be added to the JVM startup parameters. See Configuring System Properties for how to do it.
-Datlassian.org.osgi.framework.bootdelegation.extra=com.sun.security.auth.* --add-exports=java.base/sun.net.dns=ALL-UNNAMED --add-exports=java.base/sun.security.jca=ALL-UNNAMED --add-exports=java.base/sun.net=ALL-UNNAMED
For Windows Service, please separate these (the example below is for Confluence):
Add to Java Options:
-Datlassian.org.osgi.framework.bootdelegation.extra=com.sun.security.auth.*
Add to Java 9 Options:
--add-exports=java.base/sun.net.dns=ALL-UNNAMED --add-exports=java.base/sun.security.jca=ALL-UNNAMED --add-exports=java.base/sun.net=ALL-UNNAMED