[krbdev.mit.edu #8945] krb5kdc: the 32 realms limit
    Greg Hudson via RT 
    rt at krbdev.mit.edu
       
    Tue Sep  8 13:20:04 EDT 2020
    
    
  
<URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=8945 >
For your use case, would it be better to have a separate KDB for each realm
(implying separate storage, propagation, and backup), or have one KDB to which
realms could be added and removed?
To answer one of your questions, if you ran two separate krb5kdc processes each
with 31 -r options to get around the current 32-realm limitation, they would
have to serve different ports.
    
    
More information about the krb5-bugs
mailing list