[SSSD] [PATCH] Create kdcinfo and kpasswdinfo file at startup

Simo Sorce ssorce at redhat.com
Sun May 9 18:56:07 UTC 2010


On Fri, 7 May 2010 17:23:57 +0200
Sumit Bose <sbose at redhat.com> wrote:

> On Fri, May 07, 2010 at 11:00:34AM -0400, Stephen Gallagher wrote:
> > On 05/07/2010 09:34 AM, Sumit Bose wrote:  
> > > Hi,
> > >
> > > this patch should solve #470 by calling be_resolve_server_send()
> > > during startup.
> > >  
> > 
> > 
> > Nack. As discussed off-list, we need to write a kdcinfo even when
> > we're offline at startup, so that services trying to get service
> > tickets will receive "Cannot contact any KDC for realm
> > 'EXAMPLE.COM' while getting initial credentials" instead of "Can't
> > locate any KDC for realm 'EXAMPLE.COM'" Presumably network services
> > will handle for themselves retrying to get the service ticket at a
> > future time if it's only unavailable, but if it can't find the KDC
> > at all, it may simply refuse to start.  
> 
> New version attached.

Sorry, I am not really sure this is a good idea. How do we know that
this faulty address is not going to be cached somewhere and will end up
making the app fail ? Do we have assurances it is never cached in
libkrb5 ?

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York



More information about the sssd-devel mailing list