kerberos capacity planning questions

[Russ Allbery]

Tim Metz <tpmetz at ucdavis.edu> writes:

> As related requirements items, I am also looking for MIT KDC
> installations with (1) greater than 50,000 accounts, and (2) greater
> than 100,000 accounts (user + service principals).  If anyone is running
> an MIT KDC this size and can share that information it would be greatly
> appreciated.

Stanford currently has:

Type          Count  Description            
-----------  ------  -----------------------
kadmin/*          3  Kerberos administration
*/admin           5  Admin instances
*/cgi          7046  CGI instances
*/root           78  Root instances
HTTP/*           26  Negotiate-Auth
K/M               1  Master key
afpserver/*       8  Apple File Share
afs/*             1  AFS
ftp/*             3  Kerberized FTP
host/*         1359  Host login
ident/*           2  S/Ident
imap/*           20  IMAP
krbtgt/*          7  TGT and cross-realm
ldap/*           28  LDAP
lpr/*             3  Authenticated printing
nfs/*             1  NFS
pop/*            19  Kerberized POP
service/*       200  Service principals
sieve/*          14  Sieve mail filtering
smtp/*           19  Authenticated SMTP
uniengd/*         5  Oracle Calendar
webauth/*       506  WebAuth v3
Users        151555  Users
             ======
     Total:  161359

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>