[32448] in Kerberos
bug report: "too many SRV records" becomes "no SRV records"
daemon@ATHENA.MIT.EDU (Richard E. Silverman)
Wed Jun 9 18:12:14 2010
From: "Richard E. Silverman" <res@qoxp.net>
Message-ID: <m2hblbc2mf.fsf@darwin.oankali.net>
MIME-Version: 1.0
X-Complaints-To: abuse@thundernews.com
Date: Wed, 09 Jun 2010 17:33:44 -0400
To: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
In 1.8.1, there is the following code in src/lib/krb5/os/dnsglue.c:
krb5int_dns_init(struct krb5int_dns_state **dsp,
char *host, int nclass, int ntype)
{
...
nextincr = 2048;
maxincr = INT_MAX;
...
One day, due to an error, the number of KDC SRV records for one of our
realms doubled from 27 to 54... and KDC lookups via DNS prompty broke. I
bumped up the nextincr value above, and it started working again.
Probably not the right fix, but just letting you know that there's a bug
here.
--
Richard Silverman
res@qoxp.net
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
