X-CACHECONF in cache type 0504
ghudson at MIT.EDU
Thu Nov 18 13:56:41 EST 2010
On Thu, 2010-11-18 at 13:27 -0500, Tim Alsop wrote:
> How do you explain this extra cache entry if Active Directory is being
> used, which is not supporting FAST ?
We write that config entry if the encrypted padata response from the KDC
contains a padata element of type 136 (PA-FX-FAST).
When I kinit against an old MIT KDC, or against the AD 2003 KDC we have
here, the code does not see such a padata element and does not write the
config entry. Without further investigation on your end, I cannot
explain why you are seeing the config entry in your tests.
More information about the krbdev