KDC with openldap backend, ldap replication, can it chase referrals?

Andreas Hasenack andreas at canonical.com
Tue Apr 14 15:34:13 EDT 2020


Hi,

Can mit kerberos (1.17 for the purpose of this conversation) using the
openldap backend (kldap) chase ldap referrals when it tries to write
to an openldap replica, which is read-only?

In other words, can I list both the openldap primary and its read-only
replica in krb5.conf's ldap_servers parameter?


More information about the Kerberos mailing list