Re: Limit kinit by client address?

2017-04-20 Thread Wang Jian
2017-04-20 2:09 GMT+08:00 Greg Hudson : > On 04/19/2017 08:10 AM, Wang Jian wrote: >> I used to think that I can limit kinit by client address for certain >> principal, using a preauth plugin. [...] > >> Now, we do have such demand. But when I start to implement it, I find >> that in no way client

Re: fd (file descriptor) leak in replay cache

2017-04-20 Thread Robbie Harwood
Parity error writes: > We have been using the kerberos 1.10.3 library and we find that > occasionally a lot of the following files are kept open by the library > and they fill up the fd limit of the process, Hopefully someone else has a more detailed answer for you, but there have been 82 commit