[krbdev.mit.edu #8530] krb5- 1.15 KDC network performance issue

Greg Hudson via RT rt-comment at krbdev.mit.edu
Sat Dec 24 13:00:31 EST 2016


Okay, that sounds like two bugs we need to fix:

1. If a wildcard address is explicitly specified, we don't set pktinfo 
on the socket.  The one-second latency you observed likely occurs 
because the KDC sends the reply on the wrong source address and the 
client doesn't receive it.

2. If no address is specified and the machine doesn't have any IPv6 
addresses (not even a loopback address), the KDC fails to start after 
failing to bind to the IPv6 wildcard address.  The symmetric problem 
might exist for a machine with only IPv6 addresses.


More information about the krb5-bugs mailing list