On 2/9/22 12:49 PM, Russ Allbery wrote: > My understanding is that Heimdal supports the kdc_timeout configuration > option in krb5.conf, but I don't see an equivalent for MIT Kerberos. Is > there any way for the application or for the user to control how long it > takes for the library to decide that it's not going to get a reply from > the KDC and fail the krb5_get_init_creds_password attempt?
There's no configuration setting. An application can install a send hook (krb5_set_kdc_send_hook()), but that would require reimplementing a lot of logic just to change the timeout. ________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos
