Re: Race condition while setting password

Ken Hornstein via krbdev <[email protected]> Wed, 02 Feb 2022 14:23:42 -0500
Newsgroups gmane.comp.encryption.kerberos.devel
Message-ID <[email protected]>
>With regards to the following issue :
>https://krbdev.mit.edu/rt/Ticket/Display.html?id=9037 ,
>any suggestions on whether using k5_sendto with NO_UDP as transport
>strategy, in change_set_password function, can be a valid workaround(in
>code) for a deployment which is hitting this issue and is not particularly
>specific about using UDP ?

So, this problem was HUGE for us.  It was finally resolved by switching
to TCP for password changes (we publish the password changing
server location in DNS, so it was as easy as publishing a new SRV
record).

But I am puzzled at your problem; is the problem that your client
implementation doesn't prefer TCP?  Because at least for us, once
we told the clients that TCP was available that was tried first
and it basically always worked from that point forward.

--Ken
_______________________________________________
krbdev mailing list             [email protected]
https://mailman.mit.edu/mailman/listinfo/krbdev