[krbdev.mit.edu #8468] "Cannot create TCP" logged for failed UDP socket on krb5kdc startup

David Shrimpton via RT rt-comment at krbdev.mit.edu
Wed Jul 27 19:03:07 EDT 2016


Hi,

small bug in net-server.c code.

Note: the kdc.conf has kdc_tcp_ports = ""
to disable tcp . 

On startup krb5kdc logs:

Jul 27 16:12:38 myhostname krb5kdc[26223](info): setting up network...
Jul 27 16:12:38 myhostname krb5kdc[26223](info): listening on fd 7: udp 0.0.0.0.88 (pktinfo)
krb5kdc: Address family not supported by protocol - Cannot create TCP server socket on ::.88
Jul 27 16:12:38 myhostname krb5kdc[26223](info): set up 1 sockets
Jul 27 16:12:38 myhostname krb5kdc[26226](info): commencing operation

strace shows a call to socket to match the "::.88" log entry:

socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP) = -1 EAFNOSUPPORT (Address family not supported by protocol)
write(3, "krb5kdc: Address family not supp"..., 93) = 93


I think this may be showing a small bug in lib/apputils/net-server.c.

1. The log message should show UDP not TCP as a UDP socket is being attempted
   to be created.   The code logs TCP always regardless of whether UDP or TCP
   socket is being created.  This is confusing in the situation above where
   tcp has been disabled in kdc.conf.


-- 
David Shrimpton 
Information Technology Services | The University of Queensland



More information about the krb5-bugs mailing list