]> git.ipfire.org Git - thirdparty/krb5.git/commit
Prefer TCP to UDP for password changes 856/head
authorRobbie Harwood <rharwood@redhat.com>
Mon, 8 Oct 2018 20:02:12 +0000 (16:02 -0400)
committerGreg Hudson <ghudson@mit.edu>
Tue, 9 Oct 2018 23:18:12 +0000 (19:18 -0400)
commitd7b3018d338fc9c989c3fa17505870f23c3759a8
tree6b8db9e61b39ace8bb9028f0697c99de803084af
parenteb5d2c9afa4eba05f44e66d0e843b94be74d53e7
Prefer TCP to UDP for password changes

When password changes are performed over UDP, spotty networks may
cause the client to retransmit.  This leads to replay errors if the
kpasswd server receives both requests, which hide the actual request
status and make it appear that the password has not been changed, when
it may in fact have been.  Use TCP instead with UDP fallback to avoid
this issue.

ticket: 7905
src/lib/krb5/os/changepw.c