[ https://issues.apache.org/jira/browse/DIRKRB-694?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16440252#comment-16440252 ]
Jiajia Li commented on DIRKRB-694: ---------------------------------- [~coheigea] I think using "CacheableIdentityService" in KDC Server is not very suitable because it is not very easy to notify the backend changes, I suggest removing the cache, how do you think? > kinit is still effective for a principal after delprinc the principal in the > kdc > -------------------------------------------------------------------------------- > > Key: DIRKRB-694 > URL: https://issues.apache.org/jira/browse/DIRKRB-694 > Project: Directory Kerberos > Issue Type: Bug > Reporter: Song Jun > Assignee: Colm O hEigeartaigh > Priority: Major > Fix For: 1.1.1 > > > # addprinc -pw 123456 test > # kinit.sh -conf conf test > kinit success to get the ticket > 3. delprinc test > 4. kinit.sh -conf conf test > {color:#FF0000} kinit still success to get the ticket ( this is not > expected){color} > {color:#FF0000} {color:#333333}5. restart kdc{color}{color} > {color:#FF0000}{color:#333333} 6. kinit.sh -conf conf test{color}{color} > {color:#FF0000}{color:#333333} kinit failed > KDC_ERR_C_PRINCIPAL_UNKNOWN{color}{color} > > {color:#FF0000}{color:#333333} the above steps, step 4 is not our expected. > It should kinit failed because we already delprinc the test.{color}{color} > > -- This message was sent by Atlassian JIRA (v7.6.3#76005)