Jeff Saxton <[EMAIL PROTECTED]> writes:

> I am seeing kinit fail against M$ Active directory when the
> user has > ~35 group memberships. anyone else seen this?

> kinit(v5): ASN.1 encoding ended unexpectedly while getting initial credentials

> when the number of group memberships are reduced to < 20 it works!

You need a kinit that can fall back to TCP for long responses.  Current
versions of MIT Kerberos should do this.

-- 
Russ Allbery ([EMAIL PROTECTED])             <http://www.eyrie.org/~eagle/>
________________________________________________
Kerberos mailing list           [email protected]
https://mailman.mit.edu/mailman/listinfo/kerberos

Reply via email to