[28079] in Kerberos
Re: kpropd and slurpd
daemon@ATHENA.MIT.EDU (Ken Raeburn)
Fri Jul 20 10:41:42 2007
In-Reply-To: <f7qelb$rcu$2@murdoch.acc.Virginia.EDU>
Mime-Version: 1.0 (Apple Message framework v752.3)
Message-Id: <DB65FA08-F455-48C5-96B5-4BE1C62A830D@mit.edu>
From: Ken Raeburn <raeburn@mit.edu>
Date: Fri, 20 Jul 2007 10:41:19 -0400
To: "Bryan K. Wright" <bryan@ayesha.phys.virginia.edu>
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On Jul 20, 2007, at 09:51, Bryan K. Wright wrote:
> I'm thinking about setting up replication between my
> kdc and a slave kdc. I'm using MIT kerberos 1.6.1 backed by
> an ldap database. Both the krb5kdc and slapd are running on
> the same machine, and I plan to duplicate this on the slave
> machine.
>
> Since the database is ldap, can I just use slurpd to keep
> the two servers in sync, or do I also need to run kpropd? Since
> both kpropd and slurpd would be modifying the slave machine's ldap
> database, I'm worried that they might bump into each other.
Right, you should be able to just point the slave KDC at any LDAP
server with the data.
Ken
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
