[27383] in Kerberos
Re: kinit fails against active directory 2003-sp2 when user has > ~35
daemon@ATHENA.MIT.EDU (Russ Allbery)
Mon Feb 5 14:04:46 2007
From: Russ Allbery <rra@stanford.edu>
To: kerberos@mit.edu
In-Reply-To: <45C77D6D.4000701@sensage.com> (Jeff Saxton's message of "Mon, 5
Feb 2007 13:54:37 -0500")
Date: Mon, 05 Feb 2007 11:04:22 -0800
Message-ID: <87d54o4ea1.fsf@windlord.stanford.edu>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Jeff Saxton <jeff.saxton@sensage.com> writes:
> I am seeing kinit fail against M$ Active directory when the
> user has > ~35 group memberships. anyone else seen this?
> kinit(v5): ASN.1 encoding ended unexpectedly while getting initial credentials
> when the number of group memberships are reduced to < 20 it works!
You need a kinit that can fall back to TCP for long responses. Current
versions of MIT Kerberos should do this.
--
Russ Allbery (rra@stanford.edu) <http://www.eyrie.org/~eagle/>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
