disabling kdc replay cache?

Kevin Coffman kwc at citi.umich.edu
Mon Feb 2 10:50:30 EST 2004


Could someone explain the trade-offs of enabling or disabling the KDC replay
cache?

We're having memory problems which appear to be related to the replay cache
(with extenuating circumstances **) and are considering disabling it with
--disable-kdc-replay-cache.  (We have 1.2.8 plus UM patches in production.)

** We had some network problems, which caused some ntp problems, which may
have caused the replay cache to get bloated.  Would deleting this file and
restarting the KDC be good enough?

Thanks,
K.C.



More information about the krbdev mailing list