tech-crypto archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: kerb problems (Re: can't migrate master key to Heimdal)



On Sun, Jul 02, 2000 at 12:21:22PM +0200, Frank van der Linden wrote:
> 
> There are actually 2 parts to this problem. The first part is that
> the code currently isn't capable of detecting whether krb is configured
> or not. The second part was, that timeouts in name lookups where
> long. If you do not have a nameserver configured, the DNS code will
> fall back to localhost. However, because of ICMP rate checks,
> retries will take long (the ICMP error packets enabling the code
> to see that named isn't running are limited in rate).
> 
> Bill Sommerfeld fixed this problem in -current, and the long timeouts
> are now history for me. I assume that this change will be pulled up
> into the 1.5 branch.

Wow, I just 'sysctl -w net.inet.icmp.errratelimit=0' and now su doesn't
have the long timeout as before. Thanks !

--
Manuel Bouyer <bouyer%antioche.eu.org@localhost>
--



Home | Main Index | Thread Index | Old Index