[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Bad behavior vith LDAP backend.


27 mar 2008 kl. 09.16 skrev Anders Magnusson:

> I just noticed an unwanted behavior when using LDAP backend and  
> slapd dies:
> The clients do not fail over to another kdc.  I assume that this is  
> because the kdc returns
> something, the log says:
>
> Mar 27 08:19:50 gran kdc[24288]: AS-REQ helstr-4@LTU.SE from  
> IPv4:130.240.42.40 for krbtgt/LTU.SE@LTU.SE
> Mar 27 08:19:50 gran kdc[24288]: Failed to open database: Wrong  
> database version
>
> I don't know what can be returned, but I think that either the kdc  
> should return "try next kdc"
> or something, or just stop answering requests.

In addition to stop answering question, KRB5KDC_ERR_SVC_UNAVAILABLE  
can be returned, however, its not supported by all clients.

Cant make up my mind where the error should be returned.

Love