[28462] in Kerberos
Re: MIT Incremental Propagation
daemon@ATHENA.MIT.EDU (Kevin Coffman)
Fri Sep 21 17:12:00 2007
Message-ID: <4d569c330709211411k67e3d791s3a13ca4775b9979e@mail.gmail.com>
Date: Fri, 21 Sep 2007 17:11:46 -0400
From: "Kevin Coffman" <kwc@citi.umich.edu>
To: "John Hascall" <john@iastate.edu>
In-Reply-To: <32705.1190405306@malison.ait.iastate.edu>
MIME-Version: 1.0
Content-Disposition: inline
Cc: harris@ucdavis.edu, kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On 9/21/07, John Hascall <john@iastate.edu> wrote:
>
> > John Harris wrote:
> > > Does MIT's current implementation of the Kerberos KDC include
> > > incremental propagation? I know it didn't a long time ago, then there
> > > were CITI patches for it, then those didn't work for awhile. I don't
> > > seem to be able to pinpoint an answer to it.
>
> Jeffrey Altman replied:
> > There is no incremental propagation distributed with MIT Kerberos.
>
> I haven't studied it all that extensively,
> so correct me if I am wrong, but with the
> new "DAL" stuff there is now an opportunity
> to do a 'proper' job of multi-master KDCs
> (dare I say it) in a "ubik-like" or "AD-like"
> manner.
>
> Is there anybody out there already looking at this?
My intention is to make our patch a "plugin wrapper", and hopefully
something that would eventually acceptable to be included in the
distribution. I think that one of the big turn-offs initially was its
use of threads. With the thread-safe library, I hope that is less of
a deterrent.
K.C.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
