[28455] in Kerberos
Re: MIT Incremental Propagation
daemon@ATHENA.MIT.EDU (Nicolas Williams)
Fri Sep 21 16:21:26 2007
Date: Fri, 21 Sep 2007 15:20:52 -0500
From: Nicolas Williams <Nicolas.Williams@sun.com>
To: John Hascall <john@iastate.edu>
Message-ID: <20070921202052.GQ7312@Sun.COM>
Mail-Followup-To: John Hascall <john@iastate.edu>,
jaltman@secure-endpoints.com, harris@ucdavis.edu, kerberos@mit.edu
Mime-Version: 1.0
Content-Disposition: inline
In-Reply-To: <32705.1190405306@malison.ait.iastate.edu>
Cc: harris@ucdavis.edu, kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On Fri, Sep 21, 2007 at 03:08:26PM -0500, John Hascall wrote:
> > > Does MIT's current implementation of the Kerberos KDC include
> > > incremental propagation? I know it didn't a long time ago, then there
> > > were CITI patches for it, then those didn't work for awhile. I don't
> > > seem to be able to pinpoint an answer to it.
>
> > There is no incremental propagation distributed with MIT Kerberos.
>
> I haven't studied it all that extensively,
> so correct me if I am wrong, but with the
> new "DAL" stuff there is now an opportunity
> to do a 'proper' job of multi-master KDCs
> (dare I say it) in a "ubik-like" or "AD-like"
> manner.
There are plenty of LDAP servers suitable for backending the KDC that
support incremental and/or multi-master replication.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
