kadmin heavy load

Greg Hudson ghudson at MIT.EDU
Tue Sep 17 13:09:50 EDT 2013


On 09/16/2013 08:43 AM, sergio.conrad at laposte.net wrote:
> 10 % of the changes got the error:
> kadmin: Communication failure with server while initializing kadmin interface

Password changes are CPU-intensive for kadmind because the server has to 
run deliberately expensive string-to-key operations on the new password. 
  kadmind is also single-threaded, so it will use only one CPU and won't 
accept connections while processing another client's password change.

So, with 20 concurrent changes going on at once, you may simply be 
overloading the server and getting timeouts on the clients.



More information about the Kerberos mailing list