Determening the number of clients per KDC

Mark Pröhl mark at mproehl.net
Tue Apr 17 04:25:55 EDT 2018


On 04/16/2018 05:51 PM, Russ Allbery wrote:
> ... Clients
> aren't going to generally all try to get a ticket at the same time, due to
> ticket caching, so that scales to a lot of clients.
> 

I have only seen JAVA/JAAS clients caching the TGT and not the service 
tickets. Especially in Hadoop environments this leads to much more TGS 
traffic than in "classical" Kerberos environments. 1000 rps are not unusual.

- Mark


More information about the Kerberos mailing list