The mysterious death of kprop when running incremental propagtion

William Clark majorgearhead at gmail.com
Wed Apr 2 17:57:05 EDT 2014


I am in a rock and a hard place.  I must use CentOS upstream packages, however their upstream latest is 10.10.3.  I see one of the bugs fixed was an issue where a full propagation doesn’t complete all the way but kprop thinks its fine.  I think this may be what I am hitting.  Wondering if there is any tuning I could do to mitigate this while I wait for later packages.  My only other option is to go back to traditional propagation.

Right now my slaves have this config:
iprop_master_ulogsize = 1000
iprop_slave_poll = 2m

Additionally like I shared before, I am running the following every 10 mins '/usr/sbin/kdb5_util dump'

I wonder if upping the ulog size would allow more time before a full prop is called for those times my server is ultra busy.  My thinking is this may be happening during full prop which happens because the server was busy for a period of time.

Any thoughts would be helpful.


William Clark



On Mar 31, 2014, at 8:34 PM, Greg Hudson <ghudson at MIT.EDU> wrote:

> On 03/31/2014 05:44 PM, William Clark wrote:
>> Running the following from CentOS upstream:
>> krb5-server-1.10.3-10.el6_4.6.x86_64
>> 
>> I am not adverse to going with the latest stable MIT version if it will
>> help in this.
> 
> I think testing 1.12.1 would be worthwhile.  I don't know of any
> specific bugs in 1.10 which could lead to a SIGABRT, but there are
> numerous iprop and locking improvements which went into 1.11 and 1.12
> but were too invasive to backport to 1.10.



More information about the Kerberos mailing list