Re: A Local KDC

"Greg Hudson" <[email protected]> Mon, 8 Jul 2024 11:03:32 -0400
Newsgroups gmane.comp.encryption.kerberos.devel
Message-ID <[email protected]>
On 7/8/24 01:29, Andreas Schneider wrote:
> I spend time time doing a deeper dive. I think the first thing we need to do
> is to agree on the config options and how they should work.

Given what we have now, I think we want to add the realm variable 
"kdc_unix_listen = pathname".

> Currently we simply start listening on the port for udp and tcp by default.
> 
> - Should a unix socket be an additional socket?

Yes?  (Is there a way it could be the same socket?)

> - Should the specification off a unix socket turn off tcp/udp?

No.

> - How do we disable tcp/udp listeners?

kdc_tcp_listen = ""
kdc_listen = ""

(already works, although in an apparent oversight only kdc_tcp_listen = 
"" is documented)
_______________________________________________
krbdev mailing list             [email protected]
https://mailman.mit.edu/mailman/listinfo/krbdev