one time password integration

Greg Hudson ghudson at mit.edu
Wed Jul 31 15:28:54 EDT 2024


On 7/31/24 14:22, Charles Hedrick via Kerberos wrote:
> The comments suggest that with TCP if there isn't an answer within 10 sec, it then tries all servers.

This comment is outdated; I missed it when making the behavior changes. 
Starting in release 1.22, once a KDC accepts a connection, the client 
will not initiate communications with other KDCs; it will wait 
indefinitely or until the total request timeout for that KDC (and any 
previously contacted KDCs) to answer.


More information about the Kerberos mailing list