Strange behavior with kadmind and incremental propagation in 1.8.3
Nico Williams
nico at cryptonector.com
Wed Feb 27 20:50:57 EST 2013
On Wed, Feb 27, 2013 at 5:23 PM, vs_krb <vs.krbadm at gmail.com> wrote:
> Looking at the release log for 1.8.6 from http://web.mit.edu/kerberos/krb5-1.8/krb5-1.8.6.html , I see the issue mentioned in this thread is addressed with that realease. I am wondering if you would still recommend folks on 1.8.6 to upgrade as well.
>
> We are running 1.8.6 and we are planning to turn on incremental propagation. Seeing the MIT documentation and forums, I get the impression that iprop is not as stable as a straight kprop push from master to slaves(I understand it is more complicated than a simple dump of db and shooting it across). But looking at this thread, the question that I get is whether we need to go 1.11 or at least 1.10 before turning on iprop.
I can't speak for MIT, but IMO if you're using iprop then you should
upgrade to 1.11. There are a lot of iprop bug fixes in 1.11.
Nico
--
More information about the Kerberos
mailing list