[17166] in Kerberos_V5_Development
Re: [PATCH] Plugin Interface Change
daemon@ATHENA.MIT.EDU (Simo Sorce)
Thu Sep 15 18:10:39 2011
From: Simo Sorce <simo@redhat.com>
To: Greg Hudson <ghudson@mit.edu>
In-Reply-To: <1316104309.718.216.camel@t410>
Date: Thu, 15 Sep 2011 18:10:14 -0400
Message-ID: <1316124614.2684.407.camel@willson.li.ssimo.org>
Mime-Version: 1.0
Cc: "krbdev@mit.edu" <krbdev@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
On Thu, 2011-09-15 at 12:31 -0400, Greg Hudson wrote:
> * We will need an enhancement to the lookaside cache (replay.c) to
> support requests in progress. A request should be added with no
> response as soon as it is received, and then its entry should be
> augmented to contain the response after we have one. If a request
> arrives which has a lookaside cache entry with no response, we should
> drop the request (we'll respond to it later). Without this enhancement,
> KDCs will start processing retransmitted requests, which is a
> regression.
Should you drop them always or only over UDP ? I suspect that if you
have a TCP connection you should reply to it ? Or should you drop the
TCP connection and force the client to reconnect ?
Or did I completely misunderstand the issue here ?
Simo.
--
Simo Sorce * Red Hat, Inc * New York
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
