Control: reassign -1 libkrb5-3
Control: affects -1 kstart

Kai Wohlfahrt <[email protected]> writes:

> Package: kstart
> Version: 4.2-1
> Severity: important
> Tags: upstream

> Dear Maintainer,

> The k5start program repeats attempts to contact the KDC server if it is
> unavailable. However, it continues to fail if a new network is
> available.

> Steps to reproduce:
> - Disable network interface
> - Run k5start (e.g. k5start -f /etc/krb5.keytab -K 10 -u host/jason -k 
> test.tkt)
> - Enable network interface

> I expect to see the error below repeated until the network comes back
> up, and then it should stop:

> k5start: error getting credentials: Cannot contact any KDC for realm 
> 'MY.REALM.NAME'

> Instead, I continue to get errors until I stop the k5start
> process. Starting it again after the network is available shows no
> errors and gets the ticket correctly.

k5start just calls krb5_get_init_creds_*, so if something is being
inappropriately cached, this would be a bug in the underlying Kerberos
library (rather than in kstart).  Reassigning accordingly.

-- 
Russ Allbery ([email protected])               <http://www.eyrie.org/~eagle/>

Reply via email to