]> git.michaelhowe.org Git - packages/o/openafs.git/commit
Windows: handle KRB5KRB_AP_ERR_REPEAT errors
authorJeffrey Altman <jaltman@your-file-system.com>
Thu, 7 Jun 2012 13:27:00 +0000 (09:27 -0400)
committerStephan Wiesand <stephan.wiesand@desy.de>
Fri, 21 Dec 2012 17:55:31 +0000 (09:55 -0800)
commit9b63f04eff7fe5b0b963172fa4b5b8e1522c999e
tree39bcdaf40cdbe9d50320601db427eb934fa71579
parent5cfb72022a2647e04fd2a398b9623311a1716f5a
Windows: handle KRB5KRB_AP_ERR_REPEAT errors

This patchset adds logic to handle a KRB5KRB_AP_ERR_REPEAT error
sent by a KDC for the Windows aklog and the afskfw library.  The
KRB5KRB_AP_ERR_REPEAT is sent when the KDC detects a replay.
However, the KDC replay detection is known to generate many false
positives.  If KRB5KRB_AP_ERR_REPEAT is received, wait one second
and retry the request.

This patchset does not apply to 'master' due to Kerberos
Compatibility SDK conversion.

Reviewed-on: http://gerrit.openafs.org/8772
Tested-by: BuildBot <buildbot@rampaginggeek.com>
Reviewed-by: Jeffrey Altman <jaltman@your-file-system.com>
(cherry picked from commit c23664aff7a78010ba462317087e84f7ae3c8518)

Change-Id: I806a3ede5f0fa6794f3ccaf8f2d514b0c8443ec1
Reviewed-on: http://gerrit.openafs.org/8775
Tested-by: BuildBot <buildbot@rampaginggeek.com>
Reviewed-by: Paul Smeddle <paul.smeddle@gmail.com>
Reviewed-by: Stephan Wiesand <stephan.wiesand@desy.de>
src/WINNT/afsd/afskfw.c
src/WINNT/aklog/aklog.c