With Java 17 now bundled in Confluence 8.3.x, Jira 9.5+, Bitbucket 8.8+, additional configuration is required for EasySSO DNS-related code to work in NTLM and Kerberos authenticators.
We are investigating options with Atlassian and IOPLEX Jespa to have EasySSO work out of the box, but for now, the following workaround must be applied.
Three values need to be added to the JVM startup parameters. See Configuring System Properties for how to do it.
-Datlassian.org.osgi.framework.bootdelegation.extra=com.sun.security.auth.* --add-exports=java.base/sun.net.dns=ALL-UNNAMED --add-exports=java.base/sun.security.jca=ALL-UNNAMED --add-exports=java.base/sun.net=ALL-UNNAMED
For Windows Service, please separate these (the example below is for Confluence):
Add to Java Options:
-Datlassian.org.osgi.framework.bootdelegation.extra=com.sun.security.auth.*
Add to Java 9 Options:
--add-exports=java.base/sun.net.dns=ALL-UNNAMED --add-exports=java.base/sun.security.jca=ALL-UNNAMED --add-exports=java.base/sun.net=ALL-UNNAMED