On Fri, Feb 01, 2002 at 11:34:43AM -0800, Mike Friedman wrote:
> Thanks for the feedback. My initial concern was mainly with the MIT K5
> software itself, but clearly I need to worry about ancillary processes
> as well.
I would say the biggest issue is replication, not the operation of the
krb5kdc process.
The performance of the krb5kdc process in the face of a large KDB will
depend on the performance of the KDB (BDB).
Similarly with kadmind, but there you have locking interactions with the
replication system.
Hint: whole dumps lock the whole database, whereas partial dumps lock
the individual records being dumped. So if you're doing incremental
replication then kadmind's performance should not be affected(*).
BTW, Heimdal has incremental replication...
(*) unless there is much contention for a given record, and be mindful
of the fact that kadmind fork()s for each connection, so too many
admins (hundreds?) might not fly - dunno if kadmind fork()s for
kpasswd requests, but those are short anyways.
> Mike
Cheers,
Nico
--
-DISCLAIMER: an automatically appended disclaimer may follow. By posting-
-to a public e-mail mailing list I hereby grant permission to distribute-
-and copy this message.-
Visit our website at http://www.ubswarburg.com
This message contains confidential information and is intended only
for the individual named. If you are not the named addressee you
should not disseminate, distribute or copy this e-mail. Please
notify the sender immediately by e-mail if you have received this
e-mail by mistake and delete this e-mail from your system.
E-mail transmission cannot be guaranteed to be secure or error-free
as information could be intercepted, corrupted, lost, destroyed,
arrive late or incomplete, or contain viruses. The sender therefore
does not accept liability for any errors or omissions in the contents
of this message which arise as a result of e-mail transmission. If
verification is required please request a hard-copy version. This
message is provided for informational purposes and should not be
construed as a solicitation or offer to buy or sell any securities or
related financial instruments.
