primary/secondary config question
Steven Miller
stevenraymillerjr at yahoo.com
Wed Dec 12 10:01:25 EST 2007
Would there be any problems having both kdcs modifying
the database?
thanks
Steve
--- edward at murrell.co.nz wrote:
> Extra complexity for no benefit?
>
> The load on the LDAP server is likely to be higher
> than the load on the
> KDC, so spreading the load of the KDC's isn't going
> to change anything
> unless your one of your KDC's is really really slow.
> If you want
> redundancy, I would maybe consider making slave
> replicas of the LDAP
> database on the KDC machines, and pointing the KDCs
> at the local replica,
> followed by the other two.
>
> Edward
>
> > Could someone review this setup, and provide some
> > feedback?
> >
> > I am using an ldap backend, with a primary and
> > secondary kdc pointing to the same ldap server
> (only
> > the primary runs kadmind).Both the primary and the
> > secondary can affect the database. I'm wondering
> if
> > there are any reasons why I wouldn't want to do
> this
> > is a production environment.
> >
> > Thanks in advance!
> >
> > Steve
> >
>
> ________________________________________________
> Kerberos mailing list Kerberos at mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
>
____________________________________________________________________________________
Never miss a thing. Make Yahoo your home page.
http://www.yahoo.com/r/hs
More information about the Kerberos
mailing list