[38617] in Kerberos
Re: What is the proper way to force kerberos to TCP?
daemon@ATHENA.MIT.EDU (Todd Grayson)
Thu Oct 3 11:50:01 2019
MIME-Version: 1.0
In-Reply-To: <c312604e-7cf6-76c0-25d6-1a86afa9a269@mit.edu>
From: Todd Grayson <tgrayson@cloudera.com>
Date: Thu, 3 Oct 2019 09:49:09 -0600
Message-ID: <CALNT6MX2ymYhktgwjgapqqiushUkJuejHvqhJsg0tNcAx9tQ9A@mail.gmail.com>
To: Greg Hudson <ghudson@mit.edu>
Cc: "kerberos@MIT.EDU" <kerberos@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
thanks!
On Thu, Oct 3, 2019 at 9:41 AM Greg Hudson <ghudson@mit.edu> wrote:
> On 10/3/19 11:11 AM, Todd Grayson wrote:
> > We are seeing a number of conflicting information sets on how to properly
> > force TCP by kerberos clients in CentOS/RH OS distributions.
> >
> > udp_preference_limit =0? 1?
>
> By my reading of the code, either should work (0 is not treated as a
> special value, but of course no messages will be a single byte, so 1
> should work as well). I don't believe there are any other ways to force
> a TCP preference (or to disable UDP) using krb5.conf alone.
>
--
Todd Grayson
Customer Operations Engineering
Security SME
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
