[krbdev.mit.edu #3334] libkrb5 treats all KDC errors as terminal

lukeh@padl.com via RT rt-comment at krbdev.mit.edu
Wed Jan 11 16:28:23 EST 2006


I do have a patch, it's not terribly elegant nor does it handle
the TCP fallback case. Essentially the callback is invoked from
krb5int_sendto() and will ignore the response if it indicates
KRB5KDC_ERR_SVC_UNAVAILABLE.

Of course, it's going to be a little hard to test because the
KDC (Active Directory) returns the error only in very rare, and
difficult to reproduce, circumstances.

Interestingly, see bug #2738.

-- Luke

>From: "Sam Hartman via RT" <rt-comment at krbdev.mit.edu>
>Subject: Re: [krbdev.mit.edu #3334] libkrb5 treats all KDC errors as terminal
>To: lukeh at padl.com
>Date: Wed, 11 Jan 2006 15:40:06 -0500 (EST)
>
>FYI, we've indicated to Luke in private mail that we would accept a
>patch for this.
>

--




More information about the krb5-bugs mailing list