Negative caching of unknown principals

Nico Williams nico at cryptonector.com
Fri Aug 1 17:46:27 EDT 2014


IMO a negative cache belongs in the ccache, with some TTL, and with
kvno(1) always (or optionally) ignoring NAKs.


More information about the krbdev mailing list