<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
</head>
<body dir="auto">
<div>A sub second unit would be used. However we use time_t, so currently sub second time is not possible in Heimdal.</div>
<div><br>
</div>
<div>The default unit is seconds.<br>
<br>
Skickat från min iPad</div>
<div><br>
19 maj 2014 kl. 05:07 skrev "Henry B Hotz" <<a href="mailto:hbhotz@oxy.edu">hbhotz@oxy.edu</a>>:<br>
<br>
</div>
<blockquote type="cite">
<div>I presume this is for parameters specified the "Java way", and you do the right thing when you're reading a krb5.conf file.
<div><br>
</div>
<div>I can't personally think of anything where I would care about a sub-second value. OTOH the standard timeout for kinit is 1 second so it seems possible someone else might.</div>
<div><br>
<div>
<div>On May 18, 2014, at 7:38 PM, Wang Weijun <<a href="mailto:weijun.wang@oracle.com">weijun.wang@oracle.com</a>> wrote:</div>
<br class="Apple-interchange-newline">
<blockquote type="cite">Hi All<br>
<br>
I am a member of Oracle's Java SE security team, and recently we found a bug about the inconsistency of the kdc_timeout setting between Java and other vendors. Java does not support specifying a unit and always treats the value as milliseconds. While the others
support units and when no unit is given the value means seconds.<br>
<br>
We are going to fix this bug by first supporting the "s" unit. To give a chance for old Java users to specify milliseconds, we plan to also support "ms". Do you think it's useful? i.e. Do customers have a requirement of setting the timeout to be less than one
second? Of course, the most difficult thing we (Java) need to determine is what to do when there is no unit. I am thinking of a (v>120 ? ms: s) heuristics but it could be dangerous. I am not asking any other vendor to follow this style, but do you know how
people are setting this value?<br>
<br>
I do notice MIT's krb5 doc has no kdc_timeout at all. Maybe the algorithm does not care about it anymore?<br>
<br>
Thanks<br>
Max<br>
<br>
</blockquote>
</div>
<br>
<div apple-content-edited="true"><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; font-size: medium; ">
<div>Personal email. <a href="mailto:hbhotz@oxy.edu">hbhotz@oxy.edu</a></div>
<div><br>
</div>
</span><br class="Apple-interchange-newline">
</div>
<br>
</div>
</div>
</blockquote>
</body>
</html>