kerberos password change in master-slave environ

[Digant Kasundra]

No, someone stated that a single KDC isn't a problem unless you have a
couple thousand principals.  I was stating that we will have 43,000.  

We haven't deployed yet.  We're still in a proof-of-concept phase.  Since we
are moving away from a Microsoft environment, we're being challenged with
making sure we aren't losing features we had with MS (like the multimaster
DCs).

-----Original Message-----
From: Sam Hartman
To: Digant Kasundra
Cc: ''Ken Hornstein ' '; '''kerberos at mit.edu ' ' '
Sent: 3/24/2004 2:20 PM
Subject: Re: kerberos password change in master-slave environ

>>>>> "Digant" == Digant Kasundra <digant at uta.edu> writes:

    Digant> I STAND CORRECTED! (on the incremental replication stuff,
atleast).  I just
    Digant> got an email with an updated link:
    Digant> http://www.citi.umich.edu/u/kwc/krb5stuff/replication.html

You claim that with 43,000 principals you're actually having load
problems with a single KDC?

If true, that would really surprise me.  How many requests per second
do you see?


--Sam