login.M: Document that login_krb4_convert is off by default

login.c: Turn login_krb4_convert off by default, since it causes
	problems if you don't have krb524d running on the KDC.  This is
	necessary because a Solaris socket bug causes login to hang for 45
	seconds if krb524d isn't present on the KDC.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9041 dc483132-0cff-0310-8789-dd5450dbe970

diff --git a/src/appl/bsd/ChangeLog b/src/appl/bsd/ChangeLog
index 6eda77c1720b04becdb46a52d0c4df5de46e684e..88e48d470b04efe2c4ad0182c94f327b32feb3c2 100644 (file)
--- a/src/appl/bsd/ChangeLog
+++ b/src/appl/bsd/ChangeLog
@@ -1,3 +1,13 @@
+Fri Sep  6 13:22:46 1996  Theodore Y. Ts'o  <tytso@mit.edu>
+
+       * login.M: Document that login_krb4_convert is off by default.
+
+       * login.c: Turn login_krb4_convert off by default, since it causes
+               problems if you don't have krb524d running on the KDC.
+               This is necessary because a Solaris socket bug causes
+               login to hang for 45 seconds if krb524d isn't present on
+               the KDC.
+
 Mon Sep  2 12:03:53 1996  Sam Hartman  <hartmans@mit.edu>
 
        * krlogind.c rlogin.c (v5_des_write): Write out length plus

diff --git a/src/appl/bsd/login.M b/src/appl/bsd/login.M
index 7fc13d26be7dce5a092bb90d87fe5c7b6beea963..5c107081c4ecd26cefee452c09fb2a3a4a61c3f4 100644 (file)
--- a/src/appl/bsd/login.M
+++ b/src/appl/bsd/login.M
@@ -63,8 +63,13 @@ Use password to get V5 tickets. Default value true.
 Use password to get V4 tickets. Default value true.
 .IP krb4_convert
 Use Kerberos conversion daemon to get V4 tickets. Default value
-true. If false, gets initial ticket directly, which does not currently
-work with non MIT-V4 salt types (such as the AFS3 salt type.)
+false. If false, and krb4_get_tickets is true, then login will get
+the V5 tickets directly using the Kerberos V4 protocol directly.  
+This does not currently work with non MIT-V4 salt types
+(such as the AFS3 salt type.)  Note that if configuration parameter 
+is true, and the krb524d is not running, login will hang for 
+approximately a minute  under Solaris, 
+due to a Solaris socket emulation bug.
 .IP krb_run_aklog
 Attempt to run aklog. Default value true.
 .IP aklog_path

diff --git a/src/appl/bsd/login.c b/src/appl/bsd/login.c
index 86e9eeda5007bf6ea656a34616e7cb5bb62ba5c9..f58a63727133658e94ed29341ddf430e15b0171b 100644 (file)
--- a/src/appl/bsd/login.c
+++ b/src/appl/bsd/login.c
@@ -52,7 +52,7 @@ int login_krb5_get_tickets = 1;
 #define KRB4_GET_TICKETS
 int login_krb4_get_tickets = 1;
 #define KRB4_CONVERT
-int login_krb4_convert = 1;
+int login_krb4_convert = 0;
 #define KRB_RUN_AKLOG
 int login_krb_run_aklog = 1;
 #endif /* KRB5_KRB4_COMPAT */