>>> I think you'll need to make sure that you're using a _modern_ version of >>> Berkeley DB, rather than what comes with MIT Kerberos. > >Years ago, Cygnus tested the BDB code in Kerbnet with a million >principal database. We did not observe any problems (well, we fixed >the ones we observed :-). That code should be basically the same as >what's in the MIT release today.
I only know that I've heard Keith Bostic on numerous occasions say that the BDB in MIT Kerberos is ancient, full of bugs, etc etc ... I only mentioned that because of those things he talked about. But like Marc said, the best thing to do is perform your own tests. --Ken