Proxy for Kerberos?

[Russ Allbery]

John Hascall <john at iastate.edu> writes:

> I'm only familiar with the Heimdal client, but (sadly) the MIT KDC
> has only 'kprop' to do a bulk dump to slaves and most places (of
> any size) only do that infrequently, perhaps a few times a day.

Note that dumping and propagation of Stanford's site-wide KDC database to
two slaves takes less than a minute.

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>