Skip Menu |
 

History Show all quoted text — Show full headers
# Wed Sep 16 18:11:46 2020 Дилян Палаузов <dilyan.palauzov@aegee.org> - Ticket created
Date: Thu, 17 Sep 2020 00:29:49 +0300
To: "krb5-bugs" <krb5-bugs@mit.edu>
Subject: DNS SRV query for _kpasswd._tcp.REALM
From: "Дилян Палаузов" <dilyan.palauzov@aegee.org>
Download (untitled) / with headers
text/plain 793B
Hello,

kadmind listens to both TCP and UDP ports 749 and 464 (four ports).

KRB5_TRACE=/tmp/a kpasswd prints:

[11482] 1600291290.023827: Sending DNS SRV query for
_kpasswd._udp.REALM.
[11482] 1600291290.023828: Sending DNS SRV query for
_kpasswd._tcp.REALM.
[11482] 1600291290.023829: No SRV records found
[11482] 1600291290.023830: Sending DNS URI query for _kerberos-
adm.REALM.
[11482] 1600291290.023831: No URI records found
[11482] 1600291290.023832: Sending DNS SRV query for _kerberos-
adm._tcp.REALM.
[11482] 1600291290.023833: No SRV records found

https://web.mit.edu/kerberos/www/krb5-latest/doc/admin/realm_config.html talks about _kerberos-adm._tcp and _kpasswd._udp, but not about
_kpasswd._TCP.

Please verify whether _kpasswd._TCP is used and document it.

Regards
Dilyan
# Tue Sep 22 19:36:36 2020 ghudson@mit.edu (Greg Hudson) - Taken
# Tue Sep 22 19:36:36 2020 ghudson@mit.edu (Greg Hudson) - Status changed from 'new' to 'resolved'
# Tue Sep 22 19:36:36 2020 ghudson@mit.edu (Greg Hudson) - Correspondence added
From: ghudson@mit.edu
Subject: git commit
Download (untitled) / with headers
text/plain 774B

Update SRV record documentation

The KDC has listened to TCP connections by default since commit
8d88e2ab00be126237569dc72827ced2ce6b7d04 (ticket 6731). Update the
documentation for _kerberos._tcp accordingly.

Correct a formatting error introduced by commit
10eb93809b1af06e2b1147aee2e3e50058ba1bbd (ticket 8921).

For _kpasswd._udp, if the _kerberos-adm._tcp fallback is used, the
port number is changed to 464, not 749.

Add entries for _kerberos-master._tcp and _kpasswd._tcp.

https://github.com/krb5/krb5/commit/521175fd41f09d97d15d4d5a40b6611b81ef375f
Author: Greg Hudson <ghudson@mit.edu>
Commit: 521175fd41f09d97d15d4d5a40b6611b81ef375f
Branch: master
doc/admin/realm_config.rst | 23 +++++++++++++----------
1 files changed, 13 insertions(+), 10 deletions(-)
# Sat Nov 21 11:13:02 2020 ghudson@mit.edu (Greg Hudson) - Subject changed from 'DNS SRV query for _kpasswd._tcp.REALM' to 'Update SRV record documentation'
# Mon Nov 23 16:03:23 2020 ghudson@mit.edu (Greg Hudson) - Version_Fixed 1.19 added