X-CACHECONF in cache type 0504
ghudson at MIT.EDU
Fri Nov 19 11:28:17 EST 2010
On Fri, 2010-11-19 at 11:09 -0500, Tim Alsop wrote:
> I am also trying to find out where the format of these configuration
> entries is documented, if anywhere ?
I'm not aware of any documentation.
> For example, I see "fast_avail" in the entry issued by MS AD in our tests.
> I assume this means that the realm supports FAST.
Correct--although I heard back from Microsoft that they do not implement
FAST in any version of AD 2003, nor do they use padata type 136 for any
other purpose. So it's still a mystery to me why you're seeing those
entries when you kinit to your AD server.
> Are there any other values, such as fast_not_avail ?
We do not currently use any other values, but Heimdal does. Assuming
people use reasonably descriptive names that don't collide, the
name:value correspondence is a private contract between the caller of
krb5_cc_set_config and krb5_cc_get_config with that name.
More information about the krbdev