[37177] in Kerberos
Compatibilty between mixed kerberos release (KDC 1.12 client 1.10).
daemon@ATHENA.MIT.EDU (Todd Grayson)
Wed Jul 29 17:46:50 2015
MIME-Version: 1.0
From: Todd Grayson <tgrayson@cloudera.com>
Date: Wed, 29 Jul 2015 15:46:05 -0600
Message-ID: <CALNT6MX5Zc60_w=_mgaho2Nf+2HjqZFH0n_EQY8Ch-ZkAuh23w@mail.gmail.com>
To: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Hi,
Is there any general wisdom out there about mixed KDC/Client versions? Are
there concerns around allowing environments drift to where a KDC would be
on a later release than the clients?
There seems to be a change in default behavior in the 1.12+ where renewable
tickets must be specifically requested (RHEL 7 is including the 1.12 as the
tested krb release in platform).
Have there been any other gotcha's that folks have run into that are worthy
of note?
For example a mixed OS environment where centOS 7 is the KDC, at 1.12, and
the clients are all centOS 6.x land locked at the 1.10x release?
Thanks in advance!
--
Todd Grayson
Customer Operations Engineering
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
