Details
-
Enhancement
-
Resolution: Fixed
-
P3
-
8
-
b43
-
generic
-
generic
-
Verified
Backports
Issue | Fix Version | Assignee | Priority | Status | Resolution | Resolved In Build |
---|---|---|---|---|---|---|
JDK-8194025 | openjdk7u | Weijun Wang | P3 | Resolved | Fixed | master |
Description
Currently if there are multiple KDCs defined for a realm, we send UDP request to each one and wait for reply, when no reply is received, we retry. After several unsuccessful retries, we go on to the next KDC. The timeout for the wait is normally 30 seconds. If the KDCs defined are not all turned on, the time spent to finally get a response might be very long. This is especially true for customers having a main KDC and several slave KDCs and the main KDC is in maintenance.
In fact, there is a better way to detect if the KDC server is on by connect() to it first. In this way, an IMCP PortUnreachableException will be thrown in a later send/receive method immediately. Also, when this exception is thrown, we can be sure that the KDC server is off and there is no need to retry this one.
Please note that if a KDC is on but for various reasons it cannot reply in a timely manner, we will still wait for the timeout and do a retry.
In fact, there is a better way to detect if the KDC server is on by connect() to it first. In this way, an IMCP PortUnreachableException will be thrown in a later send/receive method immediately. Also, when this exception is thrown, we can be sure that the KDC server is off and there is no need to retry this one.
Please note that if a KDC is on but for various reasons it cannot reply in a timely manner, we will still wait for the timeout and do a retry.
Attachments
Issue Links
- backported by
-
JDK-8194025 enhance KDC server availability detection
- Resolved
- relates to
-
JDK-7164518 No PortUnreachableException when connecting to a non-existing DatagramSocket (mac)
- Resolved