Discussion of krb5_get_init_creds_password() behavior wasRe:problem with the kinit_prompter in kfw 2.5
kenh at cmf.nrl.navy.mil
Mon Feb 23 12:49:39 EST 2004
> Ken> According to what I see in 1.3.1, when use_master is set, it
> Ken> uses the krb5.conf entry for "admin_server" (it takes a while
> Ken> to find it, but that's certainly how I read
> Ken> krb5_locate_srv_conf_1()). I think we _all_ have an
> Ken> admin_server set; if we don't, then kadmin & kpasswd won't
> Ken> work.
>Ah, yes my confusion was that I misunderstood the code.
Okay, so given that virtually everybody has configured their site to have
an admin_server, and thus everyone has the "double query to the master KDC"
problem ... what's the best solution? Use Jeff's suggestion and turn
use_master into an int * ?
More information about the krbdev