URL:
https://github.com/SSSD/sssd/pull/214
Title: #214: UTIL: Set udp_preference_limit=0 in krb5 snippet
jhrozek commented:
"""
I'm sorry, but this patch is incorrect. For the options to work, they must be
contained in the `libdefaults` section and with the current patch, they are not, because
the subsequent calls overwrite the previous contents (which included the libdefaults
section).
I (hopefully) fixed the patch in my udplimit branch:
https://github.com/jhrozek/sssd/tree/udplimit
With this patch, an IPA client only contains the canonicalize option (same as it did with
master) and an AD client contains a libdefault section with the UDP limit disabled.
And I also tested that, on the AD client, calling kinit then doesn't trigger any UDP
traffic, but only TCP.
"""
See the full comment at
https://github.com/SSSD/sssd/pull/214#issuecomment-319951710