kerberos password change in master-slave environment

[Mike Friedman]

On Wed Mar 24 10:12:31 2004, Sam Hartman said:

>     Subu> Is there a more elegant solution, than say propagating
>     Subu> corporate wide kerberos database every 5 min or so ?
> 
> First, this actually works fairly well.
> 
> But the MIT client at least will try contacting the master (based on
> the setting of config file parameters) if it gets an error from the
> slave.

Sam,

Could you elaborate a bit?  First of all, does 'error' include just
incorrect password (because the new, correct, one hasn't yet propagated)?

Secondly, to which config parameters do you refer?

Thanks.

------------------------------------------------------------------------------
Mike Friedman                             System and Network Security
mikef at ack.Berkeley.EDU                    2484 Shattuck Avenue
1-510-642-1410                            University of California at Berkeley
http://ack.Berkeley.EDU/~mikef            http://security.berkeley.edu
------------------------------------------------------------------------------