Compatibilty between mixed kerberos release (KDC 1.12 client 1.10).

John Devitofranceschi jdvf at optonline.net
Mon Aug 3 07:18:35 EDT 2015


> On Jul 29, 2015, at 5:46 PM, Todd Grayson <tgrayson at cloudera.com> wrote:
> 
> Hi,
> 
> Is there any general wisdom out there about mixed KDC/Client versions?  Are
> there concerns around allowing environments drift to where a KDC would be
> on a later release than the clients?
> 

There was this one: 

http://krbdev.mit.edu/rt/Ticket/Display.html?id=7714

That concerns an issue with older Solaris clients using MIT KDCs >= 1.11

Greg helped me come up with a patch for this that works with 1.13, but the real answer is to patch your old Solaris systems!

jd



More information about the Kerberos mailing list