What is the proper way to force kerberos to TCP?

Greg Hudson ghudson at mit.edu
Thu Oct 3 11:41:04 EDT 2019


On 10/3/19 11:11 AM, Todd Grayson wrote:
> We are seeing a number of conflicting information sets on how to properly
> force TCP by kerberos clients in CentOS/RH OS distributions.
> 
> udp_preference_limit =0? 1?

By my reading of the code, either should work (0 is not treated as a
special value, but of course no messages will be a single byte, so 1
should work as well).  I don't believe there are any other ways to force
a TCP preference (or to disable UDP) using krb5.conf alone.


More information about the Kerberos mailing list