Re: Need a way to get the kdc timeout

["Henry B. Hotz" <hotz@jpl.nasa.gov>]

Do you propose to use something other than the usual 1 second  
timeout?  If so, why?

If you are using Krb5 over TCP, isn't there a timeout associated with  
TCP that you should use instead?

On Jun 9, 2008, at 5:10 AM, Andrew Bartlett wrote:

> In Samba4, we have a 'send_to_kdc' plugin that we register.
>
> However this code reads the context->kdc_timeout to know how long to
> spend in an loop waiting for replies.  However, we want to build  
> using a
> OS-supplied version of Heimdal, so don't want to know the internal
> structure of that krb5_context.
>
> Is there any chance we can get an access function for this, so we can
> avoid something like this? :-)
>
> @@ -298,7 +296,7 @@ krb5_error_code  
> smb_krb5_send_and_recv_func(krb5_context context,
>             socket_set_flags(smb_krb5->sock, SOCKET_FLAG_NOCLOSE);
>             event_add_timed(ev, smb_krb5,
> -                               timeval_current_ofs(context- 
> >kdc_timeout, 0),
> +                               timeval_current_ofs(10/*context- 
> >kdc_timeout*/, 0),
>                             smb_krb5_request_timeout, smb_krb5);
>
> Thanks,
>
> Andrew Bartlett
> -- 
> Andrew Bartlett
> http://samba.org/~abartlet/
> Authentication Developer, Samba Team           http://samba.org
> Samba Developer, Red Hat Inc.