[37305] in Kerberos

home help back first fref pref prev next nref lref last post

Re: Bug/kadmind: Required parameters in kdc.conf missing while

daemon@ATHENA.MIT.EDU (Greg Hudson)
Fri Nov 6 12:24:58 2015

To: kerberos@mit.edu
From: Greg Hudson <ghudson@mit.edu>
Message-ID: <563CE252.6040803@mit.edu>
Date: Fri, 6 Nov 2015 12:24:34 -0500
MIME-Version: 1.0
In-Reply-To: <4DC7F953-8921-4330-8FA9-7C58DC18F34E@panek.work>
Content-Type: text/plain; charset="utf-8"
Errors-To: kerberos-bounces@mit.edu
Content-Transfer-Encoding: 8bit

On 11/03/2015 05:25 AM, Alexander Pánek wrote:
> I get that I’m probably not supposed to set this entry to anything but a valid absolute time, but it would be very helpful if kadmind actually told me that it’s not valid and also accepts the default value. Basically the error message tells me the opposite of what kadmind wants. :)

I agree with this conclusion.  This seems like a questionable parameter
in the first place; how often would an administrator want to set an
absolute expiration time for a realm?  It seems like a relative time
would have made more sense.  Regardless, the documentation should not
specify a default that doesn't parse, and the error message when it
doesn't parse should be specific.

> I wanted to create a bug report in Kerberos’ bug tracker, but unfortunately I don’t have the rights to do so.

You can create a bug report by sending mail to krb5-bugs@mit.edu.
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos


home help back first fref pref prev next nref lref last post