Re: Trying hard to get multiple realms to work...

Actually from my notes it may be KRB5RCACHETYPE=rbl for 1.3.x.  I had  
thought that came in for 1.4, but it may be older.  The code may not  
properly detect this.

On Oct 31, 2007, at 4:37 PM, Simon Wilkinson wrote:

>
> On 31 Oct 2007, at 22:45, Henry B. Hotz wrote:
>
>
>>
>> True, but irrelevant.  In newer MIT there is an environment  
>> variable you can set (and which mod_auth_kerb does set) that  
>> disables the replay cache.
>
> Ah yes - KRB5RCACHETYPE can be set to none. I hadn't spotted that  
> one. I still feel that as a low impact fix, recoding the way that  
> 'Any' works along the lines of Russ's patch may be the easiest  
> option, which you could run until you're in a position to upgrade  
> your OS.
>
> Cheers,
>
> Simon.
------------------------------------------------------------------------
The opinions expressed in this message are mine,
not those of Caltech, JPL, NASA, or the US Government.
Henry.B.Hotz <at> jpl.nasa.gov, or hbhotz <at> oxy.edu

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/