On 7/31/24 14:22, Charles Hedrick via Kerberos wrote:
The comments suggest that with TCP if there isn't an answer within 10 sec, it then tries all servers.
This comment is outdated; I missed it when making the behavior changes. Starting in release 1.22, once a KDC accepts a connection, the client will not initiate communications with other KDCs; it will wait indefinitely or until the total request timeout for that KDC (and any previously contacted KDCs) to answer.
________________________________________________ Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos
