[Freeipa-devel] [PATCH 0019] Prefer TCP connections to UDP in krb5 clients

Simo Sorce ssorce at redhat.com
Fri Oct 4 10:12:04 UTC 2013



----- Original Message -----
> On 3.10.2013 23:43, Nathaniel McCallum wrote:
> > Patch attached.
> 
> I'm curious - what is the purpose of this patch? To prevent 1 second timeouts
> and re-transmits when OTP is in place?
> 
> What is the expected performance impact? Could it be configured for OTP
> separately - somehow? (I guess that it is not possible now ...)

It benefits also communication of large packets (when large MS-PAC or CAMMAC AD Data
are attached), so it is a better choice for IPA in general. Especially given we have
multiple KDC processes configured we do not want clients wasting KDC resources by
making multiple processes do the same operation.

Simo.

-- 
Simo Sorce * Red Hat, Inc. * New York




More information about the Freeipa-devel mailing list