[prev in list] [next in list] [prev in thread] [next in thread] 

List:       kerberos
Subject:    Re: What is the proper way to force kerberos to TCP?
From:       Todd Grayson <tgrayson () cloudera ! com>
Date:       2019-10-03 15:49:09
Message-ID: CALNT6MX2ymYhktgwjgapqqiushUkJuejHvqhJsg0tNcAx9tQ9A () mail ! gmail ! com
[Download RAW message or body]

thanks!

On Thu, Oct 3, 2019 at 9:41 AM Greg Hudson <ghudson@mit.edu> wrote:

> On 10/3/19 11:11 AM, Todd Grayson wrote:
> > We are seeing a number of conflicting information sets on how to properly
> > force TCP by kerberos clients in CentOS/RH OS distributions.
> >
> > udp_preference_limit =0? 1?
>
> By my reading of the code, either should work (0 is not treated as a
> special value, but of course no messages will be a single byte, so 1
> should work as well).  I don't believe there are any other ways to force
> a TCP preference (or to disable UDP) using krb5.conf alone.
>


-- 
Todd Grayson
Customer Operations Engineering
Security SME
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
[prev in list] [next in list] [prev in thread] [next in thread]