[krbdev.mit.edu #2599] kdc timeouts report wrong error

Jeffrey Altman via RT rt-comment at krbdev.mit.edu
Tue Jun 15 00:34:16 EDT 2004


When attempts to contact the KDC timeout during an AS_REQ, the error
code which is reported is "unable to resolve KDC".  

This is reproducible when there is no kdc configuration data in
krb5.conf and DNS SRV records for _kerberos._udp; _kerberos._tcp;
_kerberos-master._udp; and _kerberos-master._tcp exist.

Network trace shows the all DNS SRV records being obtained and AS_REQ
being sent to the server with a AS_REP being returned with an error
condition.  


More information about the krb5-bugs mailing list