slave server and replication

Steve Langasek vorlon at dodds.net
Thu Apr 11 11:07:50 EDT 2002


On Wed, Apr 10, 2002 at 08:52:19AM +0200, klaas hagemann wrote:
> rsync is a good idea, but as far as i can see from

> http://www.citi.umich.edu/u/kwc/krb5.load.txt

> it takes a lot more time to load the database then to send it over the
> network.
> And with rsync you still have this problem.

Ah, I guess I misunderstood your goal; I assumed that reducing bandwidth 
usage was the primary concern.  Our own Kerberos database is nowhere near 
large enough yet to worry about load-time.

Steve Langasek
postmodern programmer

> ----- Original Message -----
> From: "Steve Langasek" <vorlon at dodds.net>
> To: "klaas hagemann" <klaas at northsailor.de>
> Cc: "Cesar Garcia" <Cesar.Garcia at morganstanley.com>; <kerberos at mit.edu>
> Sent: Monday, April 08, 2002 3:58 PM
> Subject: Re: slave server and replication
> 
> 
> > On Mon, Apr 08, 2002 at 02:44:45PM +0200, klaas hagemann wrote:
> > > And is there any chance to do something like this with MIT Kerberos?
> >
> > Why not use rsync?  Rsync has a good algorithm for detecting changes
> > between local and remote files, and only sends as much information as
> > needed to get them back in sync.  For best results, you should still use
> > 'kdb5_util dump' to create an off-line flatfile to run rsync on, instead
> > of using the live database, and then run 'kdb5_util load' on each slave to
> > load the new changes.
> >
> > http://www.samba.org/rsync
> >
> > Steve Langasek
> > postmodern programmer
> >
> > > ----- Original Message -----
> > > From: "Cesar Garcia" <Cesar.Garcia at morganstanley.com>
> > > To: "klaas hagemann" <klaas at northsailor.de>
> > > Sent: Monday, April 08, 2002 2:19 PM
> > > Subject: Re: slave server and replication
> > >
> > >
> > > > If it's not too late, you might want to consider using Heimdal.
> > > > They support incremental propagation.
> > > >
> > > > See:
> > > > http://www.pdc.kth.se/heimdal/
> > > > http://www.pdc.kth.se/heimdal/heimdal.html
> > > >
> > > > >>>>> "klaas" == klaas hagemann <klaas at northsailor.de> writes:
> > > >
> > > > klaas> Hello,
> > > > klaas> i need to set up a couple of slave kdc's. therefor i looked for
> the
> > > replication mechanism and found out, that you have to run a cron job
> sending
> > > the whole kerberos database over the network with each replication.
> > > >
> > > > klaas> Is there any possibility only to send the difference to the old
> > > database over the network? I am loooking for a kind of incremental
> > > replication.
> > > >
> > > > klaas> Has anyone an idea for it?
> > > >
> > > > klaas> thx, Klaas
> > > > klaas> <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
> > > > klaas> <HTML><HEAD>
> > > > klaas> <META http-equiv=Content-Type content="text/html;
> > > charset=iso-8859-1">
> > > > klaas> <META content="MSHTML 6.00.2600.0" name=GENERATOR>
> > > > klaas> <STYLE></STYLE>
> > > > klaas> </HEAD>
> > > > klaas> <BODY bgColor=#ffffff>
> > > > klaas> <DIV><FONT face=Arial size=2>Hello,</FONT></DIV>
> > > > klaas> <DIV><FONT face=Arial size=2></FONT>&nbsp;</DIV>
> > > > klaas> <DIV><FONT face=Arial size=2>i need to set up a couple of slave
> > > kdc's. therefor
> > > > klaas> i looked for the replication mechanism and found out, that you
> have
> > > to run a
> > > > klaas> cron job sending the whole kerberos database over the network
> with
> > > each
> > > > klaas> replication.</FONT></DIV>
> > > > klaas> <DIV><FONT face=Arial size=2></FONT>&nbsp;</DIV>
> > > > klaas> <DIV><FONT face=Arial size=2>Is there any possibility only to
> send
> > > the
> > > > klaas> difference to the old database over the network? I am loooking
> for
> > > a kind of
> > > > klaas> incremental replication.</FONT></DIV>
> > > > klaas> <DIV><FONT face=Arial size=2></FONT>&nbsp;</DIV>
> > > > klaas> <DIV><FONT face=Arial size=2>Has anyone an idea for
> > > it?</FONT></DIV>
> > > > klaas> <DIV><FONT face=Arial size=2></FONT>&nbsp;</DIV>
> > > > klaas> <DIV><FONT face=Arial size=2>thx,
> Klaas</FONT></DIV></BODY></HTML>
> > >
> > > ________________________________________________
> > > Kerberos mailing list           Kerberos at mit.edu
> > > http://mailman.mit.edu/mailman/listinfo/kerberos
> > ________________________________________________
> > Kerberos mailing list           Kerberos at mit.edu
> > http://mailman.mit.edu/mailman/listinfo/kerberos



More information about the Kerberos mailing list