Determening the number of clients per KDC

Sergei Gerasenko gerases at gmail.com
Tue Apr 17 20:05:21 EDT 2018


> On Apr 17, 2018, at 5:20 PM, Russ Allbery <eagle at eyrie.org> wrote:
> 
> Mark Pröhl <mark at mproehl.net> writes:
>> On 04/16/2018 05:51 PM, Russ Allbery wrote:
> 
>>> ... Clients aren't going to generally all try to get a ticket at the
>>> same time, due to ticket caching, so that scales to a lot of clients.
> 
>> I have only seen JAVA/JAAS clients caching the TGT and not the service
>> tickets. Especially in Hadoop environments this leads to much more TGS
>> traffic than in "classical" Kerberos environments. 1000 rps are not
>> unusual.

Thank you for pointing that out! I have no idea what to expect from the version of Java that is going to be used. I hope I’ll find a work-around if that’s the case.


More information about the Kerberos mailing list