Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: binary
MIME-Version: 1.0
X-Mailer: MIME-tools 5.411 (Entity 5.404)
RT-Send-CC:
X-RT-Original-Encoding: iso-8859-1
Content-Length: 545

I do not believe that this patch is correct.

The SOCK_STREAM parameter to krb5int_locate_server does not determine
what type of connection is used to connect the kpasswd service.  The
SOCK_STREAM parameter is specified so that the lookup of the DNS SRV
record for the kadmin service will be performed using '_tcp' as the
kadmin service is a TCP only service.

Changing SOCK_STREAM to 'sockType' will cause the DNS SRV query to use
'_udp' which should always fail.  

This parameter is not used when searching the krb5.conf file.

Jeffrey Altman