duplicate kdc settings in krb5.conf

Greg Hudson ghudson at MIT.EDU
Tue Feb 11 21:56:05 EST 2014

On 02/11/2014 04:56 AM, Wang Weijun wrote:
> then both will be contacted, but if it's two different sub-stanza or stanza (could be in the same or different files), then only the first one will be picked up. For example, only k1 will be contacted for
> [realms]
> D1 = {
>    kdc = k1
> }
> D1 = {
>    kdc = k2
> }

I think that's a bug.  If I trace through the profile code, it winds up
creating a second subsection node for D1 within [realms], which is
inaccessible to searches.

By contrast, if you specify a top-level stanza (like [realms]) multiple
times, the relations within (directly within, not inside subsections)
get placed in the same top-level section node.

I'll open a ticket if I don't find an existing one.

More information about the krbdev mailing list