From: Arran Cudbard-Bell <a.cudbardb@freeradius.org>
Date: Wed, 5 Sep 2012 13:29:27 +0000 (+0200)
Subject: Disable ticket cache in the default configuration
X-Git-Tag: release_3_0_0_beta0~29
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=3d2e1efc4ce6be45e503ddcd76923b6f7603ccf8;p=thirdparty%2Ffreeradius-server.git

Disable ticket cache in the default configuration
---

diff --git a/raddb/mods-available/krb5 b/raddb/mods-available/krb5
index 81d1cf2cad2..f47d30b260e 100644
--- a/raddb/mods-available/krb5
+++ b/raddb/mods-available/krb5
@@ -8,4 +8,10 @@
 krb5 {
 	keytab = /path/to/keytab
 	service_principal = name_of_principle
+
+	#
+	#  The kerberos replay cache isn't needed for password verification
+	#  operations, and may cause an unnecessary performance bottleneck.
+	#
+	cache = no
 }