[28456] in Kerberos
Re: MIT Incremental Propagation
daemon@ATHENA.MIT.EDU (John Hascall)
Fri Sep 21 16:29:38 2007
To: Nicolas Williams <Nicolas.Williams@sun.com>
In-reply-to: Your message of Fri, 21 Sep 2007 15:20:52 -0500.
<20070921202052.GQ7312@Sun.COM>
Date: Fri, 21 Sep 2007 15:29:16 CDT
Message-ID: <32047.1190406556@malison.ait.iastate.edu>
From: John Hascall <john@iastate.edu>
Cc: John Hascall <john@iastate.edu>, harris@ucdavis.edu, kerberos@mit.edu
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
> > I haven't studied it all that extensively,
> > so correct me if I am wrong, but with the
> > new "DAL" stuff there is now an opportunity
> > to do a 'proper' job of multi-master KDCs
> > (dare I say it) in a "ubik-like" or "AD-like"
> > manner.
> There are plenty of LDAP servers suitable for backending the KDC that
> support incremental and/or multi-master replication.
That, I suppose, depends on your definition of "suitable".
It certainly isn't suitable to me. The size of the KDC
codebase is big enough to worry about, throwing something
like an entire LDAP server into the mix is a whole 'nother
kettle of fish.
John
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
