[krbdev.mit.edu #7369] SVN Commit

Greg Hudson via RT rt-comment at krbdev.mit.edu
Fri Oct 5 15:32:32 EDT 2012


Make kadmind iprop never return UPDATE_BUSY

Currently kadmind allows slaves to poll for updates as often as they
like, but not within 10s of the last update.  This means that iprop will
appear to fail to synchronize the KDC at any site whose master KDC
processes at least one write transaction every 10 seconds consistently.

The original intention must have been to throttle iprop clients (slave
KDCs) that poll too often.  But UPDATE_BUSY as implemented is not that,
and implementing a throttle would be difficult (requires keeping state
in a table) and mostly useless (admins can manage their poll timers just
fine without a throttle in kadmind).

https://github.com/krb5/krb5/commit/969331732b62e73d1e073ff3ad87bf1774ee9fd1
Author: Nicolas Williams <nico at cryptonector.com>
Committer: Greg Hudson <ghudson at mit.edu>
Commit: 969331732b62e73d1e073ff3ad87bf1774ee9fd1
Branch: master
 src/lib/kdb/kdb_log.c |   12 +-----------
 1 files changed, 1 insertions(+), 11 deletions(-)



More information about the krb5-bugs mailing list