From e086825a45fb7e12fb8aed34575ad336dd804f7c Mon Sep 17 00:00:00 2001 From: Theodore Tso Date: Fri, 6 Sep 1996 18:45:34 +0000 Subject: [PATCH] login.M: Document that login_krb4_convert is off by default login.c: Turn login_krb4_convert off by default, since it causes problems if you don't have krb524d running on the KDC. This is necessary because a Solaris socket bug causes login to hang for 45 seconds if krb524d isn't present on the KDC. git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@9041 dc483132-0cff-0310-8789-dd5450dbe970 --- src/appl/bsd/ChangeLog | 10 ++++++++++ src/appl/bsd/login.M | 9 +++++++-- src/appl/bsd/login.c | 2 +- 3 files changed, 18 insertions(+), 3 deletions(-) diff --git a/src/appl/bsd/ChangeLog b/src/appl/bsd/ChangeLog index 6eda77c17..88e48d470 100644 --- a/src/appl/bsd/ChangeLog +++ b/src/appl/bsd/ChangeLog @@ -1,3 +1,13 @@ +Fri Sep 6 13:22:46 1996 Theodore Y. Ts'o + + * login.M: Document that login_krb4_convert is off by default. + + * login.c: Turn login_krb4_convert off by default, since it causes + problems if you don't have krb524d running on the KDC. + This is necessary because a Solaris socket bug causes + login to hang for 45 seconds if krb524d isn't present on + the KDC. + Mon Sep 2 12:03:53 1996 Sam Hartman * krlogind.c rlogin.c (v5_des_write): Write out length plus diff --git a/src/appl/bsd/login.M b/src/appl/bsd/login.M index 7fc13d26b..5c107081c 100644 --- a/src/appl/bsd/login.M +++ b/src/appl/bsd/login.M @@ -63,8 +63,13 @@ Use password to get V5 tickets. Default value true. Use password to get V4 tickets. Default value true. .IP krb4_convert Use Kerberos conversion daemon to get V4 tickets. Default value -true. If false, gets initial ticket directly, which does not currently -work with non MIT-V4 salt types (such as the AFS3 salt type.) +false. If false, and krb4_get_tickets is true, then login will get +the V5 tickets directly using the Kerberos V4 protocol directly. +This does not currently work with non MIT-V4 salt types +(such as the AFS3 salt type.) Note that if configuration parameter +is true, and the krb524d is not running, login will hang for +approximately a minute under Solaris, +due to a Solaris socket emulation bug. .IP krb_run_aklog Attempt to run aklog. Default value true. .IP aklog_path diff --git a/src/appl/bsd/login.c b/src/appl/bsd/login.c index 86e9eeda5..f58a63727 100644 --- a/src/appl/bsd/login.c +++ b/src/appl/bsd/login.c @@ -52,7 +52,7 @@ int login_krb5_get_tickets = 1; #define KRB4_GET_TICKETS int login_krb4_get_tickets = 1; #define KRB4_CONVERT -int login_krb4_convert = 1; +int login_krb4_convert = 0; #define KRB_RUN_AKLOG int login_krb_run_aklog = 1; #endif /* KRB5_KRB4_COMPAT */ -- 2.26.2