[28527] in Kerberos
Re: Kerberos OpenLDAP Frontend
daemon@ATHENA.MIT.EDU (Booker Bense)
Thu Oct 4 14:15:21 2007
From: bbense@telemark.slac.stanford.edu (Booker Bense)
Date: Thu, 4 Oct 2007 18:02:42 +0000 (UTC)
Message-ID: <fe39s2$557$2@news.Stanford.EDU>
X-Complaints-To: news@news.stanford.edu
To: kerberos@mit.edu
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
In article <mailman.121.1190741359.2905.kerberos@mit.edu>,
Jonathan Javier Cordoba Gonzalez <jcordoba@uniandes.edu.co> wrote:
>Thanks to all of you.... I actually got that it works...
>
>According to Russ the LDAP Back End doesn't improve the performance... there
>are some performance tests??
>
I find hard to imagine anything going much faster than a KDC,
it's a single key lookup into a single database that isn't all
that big. Performance of the KDC has never been an issue in Kerberos.
The only reason to put in a LDAP back end is to simplify the
account management and get the LDAP replication stuff. There are
many good reasons not to put it in an LDAP back end.
_ Booker C. Bense
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
