[28461] in Kerberos
Re: MIT Incremental Propagation
daemon@ATHENA.MIT.EDU (Ken Raeburn)
Fri Sep 21 16:57:11 2007
In-Reply-To: <32705.1190405306@malison.ait.iastate.edu>
Mime-Version: 1.0 (Apple Message framework v752.2)
Message-Id: <18EE8EE5-4FAD-4265-ACAB-856E78554DA0@mit.edu>
From: Ken Raeburn <raeburn@mit.edu>
Date: Fri, 21 Sep 2007 16:52:59 -0400
To: John Hascall <john@iastate.edu>
Cc: harris@ucdavis.edu, kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On Sep 21, 2007, at 16:08, John Hascall wrote:
> I haven't studied it all that extensively,
> so correct me if I am wrong, but with the
> new "DAL" stuff there is now an opportunity
> to do a 'proper' job of multi-master KDCs
> (dare I say it) in a "ubik-like" or "AD-like"
> manner.
Yes, that's exactly right. At least, in theory; I haven't tried it.
Using the LDAP back end -- ah, as I see Nico was just saying -- will
get you a common database shared across the KDCs, and leaves the
replication mechanism, if any, to the LDAP administrator.
Building something on Ubik might be a possibility. I'm not that
familiar with it beyond "oh, that thing in AFS", but if it meets the
performance requirements for a KDC, yes, it could work.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
