[krbdev.mit.edu #8468] "Cannot create TCP" logged for failed UDP	socket on krb5kdc startup 
    David Shrimpton via RT 
    rt-comment at krbdev.mit.edu
       
    Wed Jul 27 19:03:07 EDT 2016
    
    
  
Hi,
small bug in net-server.c code.
Note: the kdc.conf has kdc_tcp_ports = ""
to disable tcp . 
On startup krb5kdc logs:
Jul 27 16:12:38 myhostname krb5kdc[26223](info): setting up network...
Jul 27 16:12:38 myhostname krb5kdc[26223](info): listening on fd 7: udp 0.0.0.0.88 (pktinfo)
krb5kdc: Address family not supported by protocol - Cannot create TCP server socket on ::.88
Jul 27 16:12:38 myhostname krb5kdc[26223](info): set up 1 sockets
Jul 27 16:12:38 myhostname krb5kdc[26226](info): commencing operation
strace shows a call to socket to match the "::.88" log entry:
socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP) = -1 EAFNOSUPPORT (Address family not supported by protocol)
write(3, "krb5kdc: Address family not supp"..., 93) = 93
I think this may be showing a small bug in lib/apputils/net-server.c.
1. The log message should show UDP not TCP as a UDP socket is being attempted
   to be created.   The code logs TCP always regardless of whether UDP or TCP
   socket is being created.  This is confusing in the situation above where
   tcp has been disabled in kdc.conf.
-- 
David Shrimpton 
Information Technology Services | The University of Queensland
    
    
More information about the krb5-bugs
mailing list