[23731] in Kerberos
Re: pam_krb5 against w2k3 very slow?
daemon@ATHENA.MIT.EDU (Dave)
Tue Apr 19 02:12:44 2005
From: "Dave" <davetree2-deja@yahoo.com>
Date: 18 Apr 2005 11:18:31 -0700
Message-ID: <1113848311.716928.275370@g14g2000cwa.googlegroups.com>
To: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu
>Hi,
>
>
>we connected a linux box with w2k3 and installed pam_krb5 for >sshd.
In
>principle it works but it takes about 10sec to authenticate?! The
>servers work in a test environment means basically no load.
>The krb5 installation is heimdal 0.61 but I dont know if this >really
>has do with the pam_krb5.so library.
>Is this behavior common or can it be sped up?
>
>
>Thanks for any comments,
>
>
>Tobias
Hello...
Don't know if you ever fixed this, but I just ran into the same
problem. It helps a lot if you put
kdc_timeout=1
and
max_retries=1
in your krb5.conf. It looks like it's doing a krb5_get_in_tkt but the
win2k3 server never replies. With the default kdc_timeout=3 and
max_retries=3, it ends up with a 9 second delay before continuing....
Dave
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
