[18923] in Kerberos_V5_Development

home help back first fref pref prev next nref lref last post

How often does MIT krb5 request for KDC info through DNS?

daemon@ATHENA.MIT.EDU (Wang Weijun)
Mon Aug 4 01:28:24 2014

From: Wang Weijun <weijun.wang@oracle.com>
Date: Mon, 4 Aug 2014 13:28:31 +0800
To: krbdev@mit.edu
Message-Id: <D873712D-3AD7-489F-AA44-C783163E5499@oracle.com>
Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\))
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu

Hi

KDC info can be retrieved from a DNS server but how often does MIT krb5 request for it? I grabbed some packets and it seems there are 6 rounds of requests within 3 minutes. The DNS server I am querying returns answers with TTL of 10 minutes so it looks like not honored.

I tried to read the source codes but haven't spotted a cache or something similar.

Thanks
Max


_______________________________________________
krbdev mailing list             krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev

home help back first fref pref prev next nref lref last post