A Local KDC

Greg Hudson ghudson at mit.edu
Mon Jul 8 11:03:32 EDT 2024


On 7/8/24 01:29, Andreas Schneider wrote:
> I spend time time doing a deeper dive. I think the first thing we need to do
> is to agree on the config options and how they should work.

Given what we have now, I think we want to add the realm variable 
"kdc_unix_listen = pathname".

> Currently we simply start listening on the port for udp and tcp by default.
> 
> - Should a unix socket be an additional socket?

Yes?  (Is there a way it could be the same socket?)

> - Should the specification off a unix socket turn off tcp/udp?

No.

> - How do we disable tcp/udp listeners?

kdc_tcp_listen = ""
kdc_listen = ""

(already works, although in an apparent oversight only kdc_tcp_listen = 
"" is documented)


More information about the krbdev mailing list