[18958] in Kerberos_V5_Development
Re: How often does MIT krb5 request for KDC info through DNS?
daemon@ATHENA.MIT.EDU (Weijun Wang)
Tue Aug 5 21:33:02 2014
Message-ID: <53E185B7.1080501@oracle.com>
Date: Wed, 06 Aug 2014 09:32:39 +0800
From: Weijun Wang <weijun.wang@oracle.com>
MIME-Version: 1.0
To: Nico Williams <nico@cryptonector.com>
In-Reply-To: <20140805155340.GB23175@localhost>
Cc: krbdev@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
On 8/5/2014 23:53, Nico Williams wrote:
> - doing an HTTP request w/o authentication every time, thus getting a
> 401 then trying again with Kerberos
Recalculating an auth token for each request is a little heavy. The
client is hoping the server would stop prompting for authentication
after the 1st request. I remember seeing server actually doing that.
Maybe you mean because the point below a Java server does not do that?
>
> - servlets that don't use cookies to optimize away the GSS context
> setup per-request(!!!)
--Max
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
