[31662] in Kerberos
Re: Maximum size of a Unix MIT Kerberos database backend
daemon@ATHENA.MIT.EDU (Ken Raeburn)
Mon Nov 9 01:22:46 2009
From: Ken Raeburn <raeburn@mit.edu>
To: garnett <nicolas.greneche@gmail.com>
In-Reply-To: <9ccb6aa6-ef2c-4517-a72d-72a6cc5d1a07@d21g2000yqn.googlegroups.com>
Message-Id: <9DFD9C16-E97F-45C7-961A-F1F3E879CC13@mit.edu>
Mime-Version: 1.0 (Apple Message framework v936)
Date: Mon, 9 Nov 2009 01:21:47 -0500
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On Nov 8, 2009, at 09:20, garnett wrote:
> In our University I wish to centralize authentication in a Linux MIT
> KDC. This operation will spawn a KDC with about 30 000 principals. Is
> it a problem for Kerberos MIT implementation ? We will run the 1.6
> version bundled with Debian Lenny.
>
> Is there a need for tricks to handle such a database ?
No, there shouldn't be. You may want a slave KDC or two for
redundancy in case of hardware problems -- with that many entries it's
probably going to be a critical service for a lot of people -- but in
terms of disk space and cpu load, just about any desktop or server
system you can buy off the shelf these days should be able to handle
it easily.
Ken
--
Ken Raeburn / raeburn@mit.edu / no longer at MIT Kerberos Consortium
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
