Discussion of krb5_get_init_creds_password() behavior wasRe:problem with the kinit_prompter in kfw 2.5

[Ken Hornstein]

>    Ken> According to what I see in 1.3.1, when use_master is set, it
>    Ken> uses the krb5.conf entry for "admin_server" (it takes a while
>    Ken> to find it, but that's certainly how I read
>    Ken> krb5_locate_srv_conf_1()).  I think we _all_ have an
>    Ken> admin_server set; if we don't, then kadmin & kpasswd won't
>    Ken> work.  
>
>Ah, yes my confusion was that I misunderstood the code.

Okay, so given that virtually everybody has configured their site to have
an admin_server, and thus everyone has the "double query to the master KDC"
problem ... what's the best solution?  Use Jeff's suggestion and turn
use_master into an int * ?

--Ken