[8099] in Kerberos
Re: 0 seconds initialization (round 2)
daemon@ATHENA.MIT.EDU (Barry Jaspan)
Mon Sep 23 13:11:58 1996
Date: Mon, 23 Sep 1996 12:53:59 -0400
From: "Barry Jaspan" <bjaspan@MIT.EDU>
To: Paul Fleming <fleminpm@som.siu.edu>
Cc: kerberos@MIT.EDU
In-Reply-To: [8091]
the kadm5_get_config_params function in lib/kadm5/alt_prof.c says
that when called fields to be filled should have there bitmask set.
Not quite. kadm5_get_config_params takes two param structures, the
input structure and output structure. Generally, the algorithm for
setting each field in the output structure is "if the mask bit is set,
then use the value in the input structure, otherwise get the value
from kdc.conf/krb5.conf, or use a compiled default if that does not
exist." In other words, the mask field only specifies which fields in
the input structure the client has specified and wants to override the
default. kadm5_create.c does not set the MAX_LIFE bit because it does
not care to override the default value of that field.
I recreated the database after changing the max_life value and
still no luck. I did some digging (this may be totally off base
but it's a shot)
Please send me (1) your krb5.conf, (2) your kdc.conf, (3) the full
paths of both of those files and the prefix path you configured krb5
to use, (4) the output of echo $KRB5_CONFIG and echo $KRB5_KDC_PROFILE
just before running krb5_util create, and (5) the output of kdb5_util
create.
Thanks,
Barry
