On 03/06/12 06:27, Greg Hudson wrote: > (1) Avoid the use of principal expiry times > (2) Patch your KDC not to send principal expiry times in AS replies > (3) Deploy the MIT krb5 fix to your client systems > > I can send a patch for (2) or (3) if you decide to go that route. (3) > should happen by itself eventually as the fix makes its way through the > pipeline, of course.
(3) sounds good if you could send me the patch please. If its not ready yet I'll go with (1) as a short term fix until it is. cheers mark ________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos
