From: Theodore Tso <tytso@mit.edu>
Date: Fri, 6 Sep 1996 18:45:34 +0000 (+0000)
Subject: login.M: Document that login_krb4_convert is off by default
X-Git-Tag: krb5-1.0-beta7~47
X-Git-Url: http://git.tremily.us/?a=commitdiff_plain;h=e086825a45fb7e12fb8aed34575ad336dd804f7c;p=krb5.git

login.M: Document that login_krb4_convert is off by default

login.c: Turn login_krb4_convert off by default, since it causes
	problems if you don't have krb524d running on the KDC.  This is
	necessary because a Solaris socket bug causes login to hang for 45
	seconds if krb524d isn't present on the KDC.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9041 dc483132-0cff-0310-8789-dd5450dbe970
---

diff --git a/src/appl/bsd/ChangeLog b/src/appl/bsd/ChangeLog
index 6eda77c17..88e48d470 100644
--- a/src/appl/bsd/ChangeLog
+++ b/src/appl/bsd/ChangeLog
@@ -1,3 +1,13 @@
+Fri Sep  6 13:22:46 1996  Theodore Y. Ts'o  <tytso@mit.edu>
+
+	* login.M: Document that login_krb4_convert is off by default.
+
+	* login.c: Turn login_krb4_convert off by default, since it causes
+		problems if you don't have krb524d running on the KDC.
+		This is necessary because a Solaris socket bug causes
+		login to hang for 45 seconds if krb524d isn't present on
+		the KDC.
+
 Mon Sep  2 12:03:53 1996  Sam Hartman  <hartmans@mit.edu>
 
 	* krlogind.c rlogin.c (v5_des_write): Write out length plus
diff --git a/src/appl/bsd/login.M b/src/appl/bsd/login.M
index 7fc13d26b..5c107081c 100644
--- a/src/appl/bsd/login.M
+++ b/src/appl/bsd/login.M
@@ -63,8 +63,13 @@ Use password to get V5 tickets. Default value true.
 Use password to get V4 tickets. Default value true.
 .IP krb4_convert
 Use Kerberos conversion daemon to get V4 tickets. Default value
-true. If false, gets initial ticket directly, which does not currently
-work with non MIT-V4 salt types (such as the AFS3 salt type.)
+false. If false, and krb4_get_tickets is true, then login will get
+the V5 tickets directly using the Kerberos V4 protocol directly.  
+This does not currently work with non MIT-V4 salt types
+(such as the AFS3 salt type.)  Note that if configuration parameter 
+is true, and the krb524d is not running, login will hang for 
+approximately a minute  under Solaris, 
+due to a Solaris socket emulation bug.
 .IP krb_run_aklog
 Attempt to run aklog. Default value true.
 .IP aklog_path
diff --git a/src/appl/bsd/login.c b/src/appl/bsd/login.c
index 86e9eeda5..f58a63727 100644
--- a/src/appl/bsd/login.c
+++ b/src/appl/bsd/login.c
@@ -52,7 +52,7 @@ int login_krb5_get_tickets = 1;
 #define KRB4_GET_TICKETS
 int login_krb4_get_tickets = 1;
 #define KRB4_CONVERT
-int login_krb4_convert = 1;
+int login_krb4_convert = 0;
 #define KRB_RUN_AKLOG
 int login_krb_run_aklog = 1;
 #endif /* KRB5_KRB4_COMPAT */