[604] in Kerberos_V5_Development

home help back first fref pref prev next nref lref last post

Updated KDC: replay lookaside buffer, TGS key cached

jtkohl@ATHENA.MIT.EDU (jtkohl@ATHENA.MIT.EDU)
Wed Feb 13 15:50:23 1991

I have updated the KDC to provide its own replay lookaside cache, so that it
again uses the replay cache for each time it runs through krb5_rd_req().

the dispatching routines now call to the replay lookaside to see if the
request packet has been seen recently; if it has, then the old reply is
regurgitated and re-transmitted.

In addition, the TGS key is now fetched at startup time, and used to decrypt
anything requested of the TGS.  This should help reduce the KDC turnaround
time on most TGS requests.

home help back first fref pref prev next nref lref last post