[23732] in Kerberos
replay cache proposal
daemon@ATHENA.MIT.EDU (Pitrich, Karl)
Tue Apr 19 05:35:41 2005
From: "Pitrich, Karl" <karl.pitrich@fabasoft.com>
To: kerberos@mit.edu
Message-Id: <1113903116.6315.335.camel@zaphod>
Mime-Version: 1.0
Date: Tue, 19 Apr 2005 11:31:56 +0200
Content-Type: multipart/mixed; boundary="===============29689426113005779=="
Errors-To: kerberos-bounces@mit.edu
--===============29689426113005779==
Content-Type: multipart/signed; micalg=pgp-sha1;
protocol="application/pgp-signature"; boundary="=-wtY9b5XUzFm8GKK5DBbs"
--=-wtY9b5XUzFm8GKK5DBbs
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable
Hi,
I encounter problems with the replay cache on the client side
while using a SPNEGO auth module for apache.
The replay cache, per default, gets persisted in files.
Under heavy load, the replay cache runs out of FD's ('to many open
files').
Further, when using multiple kerberized Webservices on one machine
for concurrent access by one webclient(user), the replay cache becomes
effective, because it is system global, which is IMHO not correct
default behaviour.
IMHO it would be better to make the replay cache configurable at runtime
via environment variable (KRB_RC_INMEMORY).
If you concur to this proposal, I'll submit a patch shortly.
greetings,
/ Karl
--=-wtY9b5XUzFm8GKK5DBbs
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
iD8DBQBCZNAMhjEylB2OKukRAoxLAKCK1GIBRrCJNqpVlC1KhdV2a9OJYACgoST8
aRwuwjkRx8rHbQsoFyAfUgc=
=IgRQ
-----END PGP SIGNATURE-----
--=-wtY9b5XUzFm8GKK5DBbs--
--===============29689426113005779==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
--===============29689426113005779==--
