MIT Incremental Propagation

[Nicolas Williams]

On Fri, Sep 21, 2007 at 03:08:26PM -0500, John Hascall wrote:
> > > Does MIT's current implementation of the Kerberos KDC include 
> > > incremental propagation?  I know it didn't a long time ago, then there 
> > > were CITI patches for it, then those didn't work for awhile.  I don't 
> > > seem to be able to pinpoint an answer to it.
> 
> > There is no incremental propagation distributed with MIT Kerberos.
> 
> I haven't studied it all that extensively,
> so correct me if I am wrong, but with the
> new "DAL" stuff there is now an opportunity
> to do a 'proper' job of multi-master KDCs
> (dare I say it) in a "ubik-like" or "AD-like"
> manner.

There are plenty of LDAP servers suitable for backending the KDC that
support incremental and/or multi-master replication.