[38616] in Kerberos
Re: What is the proper way to force kerberos to TCP?
daemon@ATHENA.MIT.EDU (Greg Hudson)
Thu Oct 3 11:41:18 2019
To: Todd Grayson <tgrayson@cloudera.com>,
"kerberos@MIT.EDU" <kerberos@mit.edu>
From: Greg Hudson <ghudson@mit.edu>
Message-ID: <c312604e-7cf6-76c0-25d6-1a86afa9a269@mit.edu>
Date: Thu, 3 Oct 2019 11:41:04 -0400
MIME-Version: 1.0
In-Reply-To: <CALNT6MUF0u+GGHgGw+H42r3f9xNj4RyG_jwWYX=CtDOFXmn12g@mail.gmail.com>
Content-Language: en-US
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On 10/3/19 11:11 AM, Todd Grayson wrote:
> We are seeing a number of conflicting information sets on how to properly
> force TCP by kerberos clients in CentOS/RH OS distributions.
>
> udp_preference_limit =0? 1?
By my reading of the code, either should work (0 is not treated as a
special value, but of course no messages will be a single byte, so 1
should work as well). I don't believe there are any other ways to force
a TCP preference (or to disable UDP) using krb5.conf alone.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
