[
https://issues.apache.org/jira/browse/DIRKRB-694?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16362168#comment-16362168
]
Colm O hEigeartaigh commented on DIRKRB-694:
--------------------------------------------
The principal is deleted correctly in the backend. It looks like the problem is
with the "CacheableIdentityService" in the KDC Server. We need to find a way of
communicating to it when the backend changes.
> kinit is still effective for a principal after delprinc the principal in the
> kdc
> --------------------------------------------------------------------------------
>
> Key: DIRKRB-694
> URL: https://issues.apache.org/jira/browse/DIRKRB-694
> Project: Directory Kerberos
> Issue Type: Bug
> Reporter: Song Jun
> Assignee: Song Jun
> Priority: Major
> Fix For: 1.1.1
>
>
> # addprinc -pw 123456 test
> # kinit.sh -conf conf test
> kinit success to get the ticket
> 3. delprinc test
> 4. kinit.sh -conf conf test
> {color:#FF0000} kinit still success to get the ticket ( this is not
> expected){color}
> {color:#FF0000} {color:#333333}5. restart kdc{color}{color}
> {color:#FF0000}{color:#333333} 6. kinit.sh -conf conf test{color}{color}
> {color:#FF0000}{color:#333333} kinit failed
> KDC_ERR_C_PRINCIPAL_UNKNOWN{color}{color}
>
> {color:#FF0000}{color:#333333} the above steps, step 4 is not our expected.
> It should kinit failed because we already delprinc the test.{color}{color}
>
>
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
