Subject: Re: kerb problems (Re: can't migrate master key to Heimdal)
To: Frank van der Linden <>
From: Manuel Bouyer <>
List: tech-crypto
Date: 07/02/2000 14:38:03
On Sun, Jul 02, 2000 at 12:21:22PM +0200, Frank van der Linden wrote:
> There are actually 2 parts to this problem. The first part is that
> the code currently isn't capable of detecting whether krb is configured
> or not. The second part was, that timeouts in name lookups where
> long. If you do not have a nameserver configured, the DNS code will
> fall back to localhost. However, because of ICMP rate checks,
> retries will take long (the ICMP error packets enabling the code
> to see that named isn't running are limited in rate).
> Bill Sommerfeld fixed this problem in -current, and the long timeouts
> are now history for me. I assume that this change will be pulled up
> into the 1.5 branch.

Wow, I just 'sysctl -w net.inet.icmp.errratelimit=0' and now su doesn't
have the long timeout as before. Thanks !

Manuel Bouyer <>