kpropd issue when upgrading from 1.8.2 to 1.13.2

2015-06-26 Thread John Devitofranceschi
We are upgrading our infra to 1.13.2 and I noticed that kpropd fails when receiving a full sync. We are upgrading the slaves first and the master last. It seems that the 1.8.2 dump file claims to be ipropx, but it still only has the old-style policy records and that makes the 1.13.2 kpropd’s r

Re: Kerberos Authentication question(s)

2015-06-26 Thread Michael B Allen
On Fri, Jun 26, 2015 at 1:06 AM, Amos Jeffries wrote: > * HTTP is designed to contain multiple TCP connection "hops". The common > Internet scenario is 2-3 hops, maybe more. On a centrally controlled LAN > or large enterprise multi-POP network there may be 2 hops. > > * HTTP itself is stateless. I

Re: Kerberos Authentication question(s)

2015-06-26 Thread Amos Jeffries
Some clarifications about HTTP auth interactions inline... On 26/06/2015 8:44 a.m., Michael B Allen wrote: > Pls beware, I'm copying ietf-http-wg at w3.org so please remove one or > the other addresses (or both!) when replying if necessary. Not sure > about cross posting netiquette these days but