Bug 1127995
| Summary: | aggressive kinit timeout causes AS_REQ resent and subsequent OTP auth failure | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 7 | Reporter: | Fraser Tweedale <ftweedal> |
| Component: | krb5 | Assignee: | Nalin Dahyabhai <nalin> |
| Status: | CLOSED ERRATA | QA Contact: | Patrik Kis <pkis> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 7.1 | CC: | dpal, extras-qa, nalin, nathaniel, pkis, rmainz |
| Target Milestone: | rc | ||
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | krb5-1.12.2-7.el7 | Doc Type: | Rebase: Enhancements Only |
| Doc Text: |
Important: if this rebase also contains *bug fixes* (or contains only bug fixes), select the correct option from the Doc Type drop-down list.
Rebase package(s) to version: 1.12
Highlights and notable enhancements: When communicating with a KDC using a connected (TCP or HTTPS) socket, the client now gives the KDC more time to reply to the client's request before attempting to transmit the request to another server. In deployments where the KDC needs to contact a second server to complete its work, this can significantly reduce the number of unnecessary request retransmissions the client makes.
|
Story Points: | --- |
| Clone Of: | 1127992 | Environment: | |
| Last Closed: | 2015-03-05 10:01:20 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 1127992 | ||
| Bug Blocks: | |||
|
Description
Fraser Tweedale
2014-08-08 05:18:53 UTC
/CoreOS/krb5/Regression/bz922884-kinit-should-finish-when-the-tcp-socket-is-closed OLD: krb5-1.11.3-49.el7 :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: BZ#1127995:Dynamically expand timeout when TCP connects :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ PASS ] :: Command '{ time -p echo Ar1€lKRBp@ss | kinit Ariel; } &>kinit.log' (Expected 1, got 1) :: [ FAIL ] :: The kinit timeout should be at least 20 seconds (Assert: "19" should be greater than "20") :: [ LOG ] :: Duration: 19s :: [ LOG ] :: Assertions: 1 good, 1 bad :: [ FAIL ] :: RESULT: BZ#1127995:Dynamically expand timeout when TCP connects NEW: krb5-1.12.2-14.el7 :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: BZ#1127995:Dynamically expand timeout when TCP connects :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ PASS ] :: Command '{ time -p echo Ar1€lKRBp@ss | kinit Ariel; } &>kinit.log' (Expected 1, got 1) :: [ PASS ] :: The kinit timeout should be at least 20 seconds (Assert: "37" should be greater than "20") :: [ LOG ] :: Duration: 37s :: [ LOG ] :: Assertions: 2 good, 0 bad :: [ PASS ] :: RESULT: BZ#1127995:Dynamically expand timeout when TCP connects Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://rhn.redhat.com/errata/RHSA-2015-0439.html |