[33704] in Kerberos
Re: problem using disable_last_success
daemon@ATHENA.MIT.EDU (Greg Hudson)
Tue Aug 2 15:59:25 2011
From: Greg Hudson <ghudson@mit.edu>
To: Dave Steiner <steiner.dave@gmail.com>
In-Reply-To: <bbb6fa5e-eb00-4dbc-bcd3-ee6957e64de4@t5g2000yqj.googlegroups.com>
Date: Tue, 02 Aug 2011 15:59:20 -0400
Message-ID: <1312315160.23877.269.camel@t410>
Mime-Version: 1.0
Cc: "steiner@oit.rutgers.edu" <steiner@oit.rutgers.edu>,
"kerberos@mit.edu" <kerberos@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On Tue, 2011-08-02 at 12:54 -0400, Dave Steiner wrote:
> So I put the following in my krb5.conf, per the instructions in the
> Administrator's Guide:
>
> [dbmodules]
> disable_last_success = true
That's not what the administrator's guide was trying to say. You should
have a subsection in dbmodules corresponding to the database_module
directive in your realm definition. For example:
[realms]
KRBTEST.COM = {
...
database_module = db2-krbtest
...
}
[dbmodules]
db2-krbtest = {
disable_last_success = true
database_name = /path/to/...
...
}
> Didn't really notice any improvement but ok.... then someone noticed
> that we were still logging! I dug around the code and found the
> krb5.conf manpage that says this belongs in the dbdefaults section....
That's a bug. I'll change either the code or the documentation after
looking at the situation a little more.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
