KDC timeout for MIT Kerberos?

Greg Hudson ghudson at mit.edu
Thu Feb 10 00:47:54 EST 2022


On 2/9/22 12:49 PM, Russ Allbery wrote:
> My understanding is that Heimdal supports the kdc_timeout configuration
> option in krb5.conf, but I don't see an equivalent for MIT Kerberos.  Is
> there any way for the application or for the user to control how long it
> takes for the library to decide that it's not going to get a reply from
> the KDC and fail the krb5_get_init_creds_password attempt?

There's no configuration setting.  An application can install a send
hook (krb5_set_kdc_send_hook()), but that would require reimplementing a
lot of logic just to change the timeout.


More information about the Kerberos mailing list