[32240] in Kerberos
"Ticket expired" when KDC gets sluggish
daemon@ATHENA.MIT.EDU (Brian J. Murrell)
Mon Apr 5 17:45:02 2010
To: kerberos@mit.edu
From: "Brian J. Murrell" <brian@interlinx.bc.ca>
Date: Sat, 03 Apr 2010 09:28:14 -0400
Message-ID: <1270301293.9260.395.camel@pc.interlinx.bc.ca>
Mime-Version: 1.0
X-Complaints-To: usenet@dough.gmane.org
Content-Type: multipart/mixed; boundary="===============1254032615=="
Errors-To: kerberos-bounces@mit.edu
--===============1254032615==
Content-Type: multipart/signed; micalg="pgp-sha1";
protocol="application/pgp-signature";
boundary="=-uyJIKhL/6H0g3Rf+xZo5"
--=-uyJIKhL/6H0g3Rf+xZo5
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Every 12 hours at noon and midnight, my KDC is backed up. That end up
driving the load on that machine up and it can become quite slow to
respond.
What is interesting (for some value of "interesting" about that is that
ever since my upgrade from Ubuntu Hardy (kerberos version 1.6-beta1) to
Ubuntu Lucid (kerberos version 1.8-alpha1) on that machine, when this
backup does start and the machine does become sluggish, I start to see
the following messages:
00:00:04 krb5kdc TGS_REQ (7 etypes {18 17 16 23 1 3 2}) 2001:1234:123:0:123=
:1234:1234:1234: PROCESS_TGS: authtime 0, <unknown client> for <unknown se=
rver>, Ticket expired
00:00:05 krb5kdc TGS_REQ (7 etypes {18 17 16 23 1 3 2}) 2001:1234:123:0:123=
:1234:1234:1234: PROCESS_TGS: authtime 0, <unknown client> for <unknown se=
rver>, Ticket expired
[ 4 repeats deleted ]
00:00:53 krb5kdc TGS_REQ (7 etypes {18 17 16 23 1 3 2}) 2001:1234:123:0:123=
:1234:1234:1234: PROCESS_TGS: authtime 0, <unknown client> for <unknown se=
rver>, Ticket expired
[ 5 repeats deleted ]
I wonder if perhaps there is some configurable timeout value I can crank
up to give the sluggish KDC more time to do it's business.
Or perhaps I am misunderstanding the nature of the problem?
Cheers,
b.
--=-uyJIKhL/6H0g3Rf+xZo5
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iEYEABECAAYFAku3Qm0ACgkQl3EQlGLyuXAhZwCgjJVcxvlXZXT/UEiwNtdEDn5H
LfAAoMZTJr/4iXaOvA29R/3UXbm3dfDx
=6/p+
-----END PGP SIGNATURE-----
--=-uyJIKhL/6H0g3Rf+xZo5--
--===============1254032615==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
--===============1254032615==--
