[28454] in Kerberos
Re: MIT Incremental Propagation
daemon@ATHENA.MIT.EDU (John Hascall)
Fri Sep 21 16:08:46 2007
To: jaltman@secure-endpoints.com
In-reply-to: Your message of Fri, 21 Sep 2007 15:54:22 -0400.
<46F4216E.1070406@secure-endpoints.com>
Date: Fri, 21 Sep 2007 15:08:26 CDT
Message-ID: <32705.1190405306@malison.ait.iastate.edu>
From: John Hascall <john@iastate.edu>
Cc: harris@ucdavis.edu, kerberos@mit.edu
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
> John Harris wrote:
> > Does MIT's current implementation of the Kerberos KDC include
> > incremental propagation? I know it didn't a long time ago, then there
> > were CITI patches for it, then those didn't work for awhile. I don't
> > seem to be able to pinpoint an answer to it.
Jeffrey Altman replied:
> There is no incremental propagation distributed with MIT Kerberos.
I haven't studied it all that extensively,
so correct me if I am wrong, but with the
new "DAL" stuff there is now an opportunity
to do a 'proper' job of multi-master KDCs
(dare I say it) in a "ubik-like" or "AD-like"
manner.
Is there anybody out there already looking at this?
John
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
