diff options
| author | Theodore Tso <tytso@mit.edu> | 1996-09-06 18:45:34 +0000 |
|---|---|---|
| committer | Theodore Tso <tytso@mit.edu> | 1996-09-06 18:45:34 +0000 |
| commit | e086825a45fb7e12fb8aed34575ad336dd804f7c (patch) | |
| tree | 8b80523b6436b4b4ae3d1290a922ac3e18785daf /src | |
| parent | 0d8b52dcebd0124fe2c92a44cb0e7b632c524a1a (diff) | |
| download | krb5-e086825a45fb7e12fb8aed34575ad336dd804f7c.tar.gz krb5-e086825a45fb7e12fb8aed34575ad336dd804f7c.tar.xz krb5-e086825a45fb7e12fb8aed34575ad336dd804f7c.zip | |
login.M: Document that login_krb4_convert is off by default
login.c: Turn login_krb4_convert off by default, since it causes
problems if you don't have krb524d running on the KDC. This is
necessary because a Solaris socket bug causes login to hang for 45
seconds if krb524d isn't present on the KDC.
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9041 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src')
| -rw-r--r-- | src/appl/bsd/ChangeLog | 10 | ||||
| -rw-r--r-- | src/appl/bsd/login.M | 9 | ||||
| -rw-r--r-- | src/appl/bsd/login.c | 2 |
3 files changed, 18 insertions, 3 deletions
diff --git a/src/appl/bsd/ChangeLog b/src/appl/bsd/ChangeLog index 6eda77c172..88e48d470b 100644 --- a/src/appl/bsd/ChangeLog +++ b/src/appl/bsd/ChangeLog @@ -1,3 +1,13 @@ +Fri Sep 6 13:22:46 1996 Theodore Y. Ts'o <tytso@mit.edu> + + * login.M: Document that login_krb4_convert is off by default. + + * login.c: Turn login_krb4_convert off by default, since it causes + problems if you don't have krb524d running on the KDC. + This is necessary because a Solaris socket bug causes + login to hang for 45 seconds if krb524d isn't present on + the KDC. + Mon Sep 2 12:03:53 1996 Sam Hartman <hartmans@mit.edu> * krlogind.c rlogin.c (v5_des_write): Write out length plus diff --git a/src/appl/bsd/login.M b/src/appl/bsd/login.M index 7fc13d26be..5c107081c4 100644 --- a/src/appl/bsd/login.M +++ b/src/appl/bsd/login.M @@ -63,8 +63,13 @@ Use password to get V5 tickets. Default value true. Use password to get V4 tickets. Default value true. .IP krb4_convert Use Kerberos conversion daemon to get V4 tickets. Default value -true. If false, gets initial ticket directly, which does not currently -work with non MIT-V4 salt types (such as the AFS3 salt type.) +false. If false, and krb4_get_tickets is true, then login will get +the V5 tickets directly using the Kerberos V4 protocol directly. +This does not currently work with non MIT-V4 salt types +(such as the AFS3 salt type.) Note that if configuration parameter +is true, and the krb524d is not running, login will hang for +approximately a minute under Solaris, +due to a Solaris socket emulation bug. .IP krb_run_aklog Attempt to run aklog. Default value true. .IP aklog_path diff --git a/src/appl/bsd/login.c b/src/appl/bsd/login.c index 86e9eeda50..f58a637271 100644 --- a/src/appl/bsd/login.c +++ b/src/appl/bsd/login.c @@ -52,7 +52,7 @@ int login_krb5_get_tickets = 1; #define KRB4_GET_TICKETS int login_krb4_get_tickets = 1; #define KRB4_CONVERT -int login_krb4_convert = 1; +int login_krb4_convert = 0; #define KRB_RUN_AKLOG int login_krb_run_aklog = 1; #endif /* KRB5_KRB4_COMPAT */ |