Hi, I encounter problems with the replay cache on the client side while using a SPNEGO auth module for apache.
The replay cache, per default, gets persisted in files.
Under heavy load, the replay cache runs out of FD's ('to many open
files').
Further, when using multiple kerberized Webservices on one machine
for concurrent access by one webclient(user), the replay cache becomes
effective, because it is system global, which is IMHO not correct
default behaviour.
IMHO it would be better to make the replay cache configurable at runtime
via environment variable (KRB_RC_INMEMORY).
If you concur to this proposal, I'll submit a patch shortly.
greetings,
/ Karl
signature.asc
Description: This is a digitally signed message part
________________________________________________ Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos
