On Wed Mar 24 10:12:31 2004, Sam Hartman said: > Subu> Is there a more elegant solution, than say propagating > Subu> corporate wide kerberos database every 5 min or so ? > > First, this actually works fairly well. > > But the MIT client at least will try contacting the master (based on > the setting of config file parameters) if it gets an error from the > slave.
Sam, Could you elaborate a bit? First of all, does 'error' include just incorrect password (because the new, correct, one hasn't yet propagated)? Secondly, to which config parameters do you refer? Thanks. ------------------------------------------------------------------------------ Mike Friedman System and Network Security [EMAIL PROTECTED] 2484 Shattuck Avenue 1-510-642-1410 University of California at Berkeley http://ack.Berkeley.EDU/~mikef http://security.berkeley.edu ------------------------------------------------------------------------------ ________________________________________________ Kerberos mailing list [EMAIL PROTECTED] https://mailman.mit.edu/mailman/listinfo/kerberos