[18919] in Kerberos_V5_Development
Re: Negative caching of unknown principals
daemon@ATHENA.MIT.EDU (Nico Williams)
Fri Aug 1 17:46:39 2014
MIME-Version: 1.0
In-Reply-To: <53DC05BF.7040704@mit.edu>
Date: Fri, 1 Aug 2014 16:46:27 -0500
Message-ID: <CAK3OfOjz5pRFTMOdYc740Rh3kKFsrd9mzwg-NHO-MHFxuqeMsA@mail.gmail.com>
From: Nico Williams <nico@cryptonector.com>
To: Greg Hudson <ghudson@mit.edu>
Cc: David Woodhouse <dwmw2@infradead.org>, "krbdev@mit.edu" <krbdev@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
IMO a negative cache belongs in the ccache, with some TTL, and with
kvno(1) always (or optionally) ignoring NAKs.
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
