[36663] in Kerberos
Re: Fail over in krb5.conf to next listed KDC entry?
daemon@ATHENA.MIT.EDU (Todd Grayson)
Tue Dec 9 00:21:35 2014
MIME-Version: 1.0
In-Reply-To: <CALNT6MVwkD2+LJdsvM7NgqHSm0fhR82Lfhi-HgOW9UJ7DtsF6Q@mail.gmail.com>
From: Todd Grayson <tgrayson@cloudera.com>
Date: Mon, 8 Dec 2014 22:21:10 -0700
Message-ID: <CALNT6MXMc3z3ate+_T6hK2uAzhA-HCGYABVkjjjE-iAr=BC-sA@mail.gmail.com>
To: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
... one more question - if this is a supported parameter today
(kdc_timeout) what is its default value?
Thanks
On Mon, Dec 8, 2014 at 10:20 PM, Todd Grayson <tgrayson@cloudera.com> wrote:
> Is there a configurable timeout value that can be set in the krb5.conf to
> tell a client how long to wait for a response from a KDC before failing
> over to the next listed kdc entry for a specific REALM in the [realms]
> section of the krb5.conf?
>
> When looking at
> http://web.mit.edu/kerberos/krb5-devel/doc/admin/conf_files/krb5_conf.html
> there is no reference to "kdc_timeout" which I've seen previously mentioned
> in oracle threads.
>
> Is that kdc_timeout parameter only for sun/oracle's solaris SEAM
> implementation of kerberos?
>
> Or is only the java JGSS implementation recognizing this kdc_timeout value?
>
> Or is kdc_timeout a missing parameter within the current (and previous)
> krb5.conf documentation for the [libdefaults], and it is supported in the
> 1.10+ MIT kerberos releases?
>
> Thanks in advance.
>
>
> --
> Todd Grayson
> Customer Operations Engineering
>
>
--
Todd Grayson
Customer Operations Engineering
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
