Compatibilty between mixed kerberos release (KDC 1.12 client 1.10).

[Todd Grayson]

Hi,

Is there any general wisdom out there about mixed KDC/Client versions?  Are
there concerns around allowing environments drift to where a KDC would be
on a later release than the clients?

There seems to be a change in default behavior in the 1.12+ where renewable
tickets must be specifically requested (RHEL 7 is including the 1.12 as the
tested krb release in platform).

Have there been any other gotcha's that folks have run into that are worthy
of note?

For example a mixed OS environment where centOS 7 is the KDC, at 1.12, and
the clients are all centOS 6.x land locked at the 1.10x release?

Thanks in advance!



-- 
Todd Grayson
Customer Operations Engineering