From: Andreas Schneider <asn@samba.org>
Date: Thu, 27 Nov 2025 10:04:30 +0000 (+0100)
Subject: s3:libads: Set udp_preference_limit = 0 for MIT Kerberos
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=2c51cf118a1d9b7a5956a62e71df8fa1e576599c;p=thirdparty%2Fsamba.git

s3:libads: Set udp_preference_limit = 0 for MIT Kerberos

This option enable TCP connection before UDP, when sending a message to
the KDC.

Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
---

diff --git a/source3/libads/kerberos.c b/source3/libads/kerberos.c
index f683ed19d23..5593364c397 100644
--- a/source3/libads/kerberos.c
+++ b/source3/libads/kerberos.c
@@ -1462,6 +1462,7 @@ bool create_local_private_krb5_conf_for_domain(const char *realm,
 			    "\tkdc_timeout = %d\n"
 #else
 			    "\trequest_timeout = %ds\n"
+			    "\tudp_preference_limit = 0\n"
 #endif
 			    "\tdefault_realm = %s\n"
 			    "%s"