Hi, I encounter problems with the replay cache on the client side while using a SPNEGO auth module for apache.
The replay cache, per default, gets persisted in files. Under heavy load, the replay cache runs out of FD's ('to many open files'). Further, when using multiple kerberized Webservices on one machine for concurrent access by one webclient(user), the replay cache becomes effective, because it is system global, which is IMHO not correct default behaviour. IMHO it would be better to make the replay cache configurable at runtime via environment variable (KRB_RC_INMEMORY). If you concur to this proposal, I'll submit a patch shortly. greetings, / Karl
signature.asc
Description: This is a digitally signed message part
________________________________________________ Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos