[37012] in Kerberos

home help back first fref pref prev next nref lref last post

Dear mit, could you help me with this problem in kerbero verson

daemon@ATHENA.MIT.EDU (Huangshiyou)
Thu May 28 09:26:44 2015

From: Huangshiyou <huangshiyou@huawei.com>
To: "kerberos@mit.edu" <kerberos@mit.edu>
Date: Thu, 28 May 2015 02:21:56 +0000
Message-ID: <AE7C36B9F80740499A9F5BAE5B21623D7BB534D0@SZXEMA503-MBS.china.huawei.com>
Content-Language: zh-CN
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

Dear Mit:
I found that in Kebreros core code.if first request reach kadmin process,but return to kdc after 1 second, kdc will send the same request to the other kadmind process.(in my environment, two Kerberos servers work as double active mode)
But actually, first request was processed Successfully, then the other kadmind will reject the the same request. These caused error in Kerberos client when I run "kinit user".

I wonder why timeout between kdc and kadmind can not config in somewhere else?? Or the duration(first request 1 second ,second request 2 seconds) can not be changed for some special reasons??
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post