dave.daugherty at centrify.com
Thu May 11 23:58:05 GMT 2006
Thanks for the article pointer. Yes we have tripped over kpasswd and
large PACs too.
It could be that was the problem - we were working on limited
information. My quick reading of the article is that it only discards
if the UDP frags arrive out of order - we never got any responses.
I think the moral is to only ask for the actual attributes that you are
From: Luke Howard [mailto:lukeh at padl.com]
Sent: Thursday, May 11, 2006 4:42 PM
To: Dave Daugherty
Cc: jerry at samba.org; jmcd at us.ibm.com; idra at samba.org; tridge at samba.org;
samba-technical at lists.samba.org; samba-technical at samba.org
Subject: RE: cldap
I'm the last person you'd ask about TCP/IP, but doesn't it have
to do with fragmented UDP packets being typically dropped by firewalls?
Hence the support for TCP in Kerberos:
More information about the samba-technical