[28388] in Kerberos
Kerberos policy replication
daemon@ATHENA.MIT.EDU (Martin =?ISO-8859-1?Q?Hovm=F6ller?)
Mon Sep 10 11:37:38 2007
From: Martin =?ISO-8859-1?Q?Hovm=F6ller?= <martin.hovmoller@nordnet.se>
To: kerberos@mit.edu
Date: Mon, 10 Sep 2007 17:36:56 +0200
Message-Id: <1189438616.6285.20.camel@soma.non.nordnet.se>
Mime-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Errors-To: kerberos-bounces@mit.edu
Content-Transfer-Encoding: 8bit
Hi,
My kerberos policies are not replicated along with the kerberos databasefrom the master to the slave KDC.If I add a policy on the slave however, it is removed on the nextreplication.
Why is it behaving like this, and how can I fix it?The only clue I can find is in /var/kerberos/krb5kdc/from_master on theslave. The last two lines are:policy default 0 7776000 6 2 10 4policy noexpiry 0 0 1 1 1 5
default and noexpiry are the policies I've set up on the master, so itdoes indeed look like they are sent to the slave, but not inserted intothe database somehow.
--Martin Hovmöller________________________________________________Kerberos mailing list Kerberos@mit.eduhttps://mailman.mit.edu/mailman/listinfo/kerberos
