Strange behavior with kadmind and incremental propagation in 1.8.3

Nico Williams nico at cryptonector.com
Wed Feb 27 20:50:57 EST 2013


On Wed, Feb 27, 2013 at 5:23 PM, vs_krb <vs.krbadm at gmail.com> wrote:

> Looking at the release log for 1.8.6 from http://web.mit.edu/kerberos/krb5-1.8/krb5-1.8.6.html , I see the issue mentioned in this thread is addressed with that realease. I am wondering if you would still recommend folks on 1.8.6 to upgrade as well.
>
> We are running 1.8.6 and we are planning to turn on incremental propagation. Seeing the MIT documentation and forums, I get the impression that iprop is not as stable as a straight kprop push from master to slaves(I understand it is more complicated than a simple dump of db and shooting it across). But looking at this thread, the question that I get is whether we need to go 1.11 or at least 1.10 before turning on iprop.

I can't speak for MIT, but IMO if you're using iprop then you should
upgrade to 1.11.  There are a lot of iprop bug fixes in 1.11.

Nico
--



More information about the Kerberos mailing list