Proxy for Kerberos?

[John Hascall]

> John Hascall <john at iastate.edu> writes:
> > I'm only familiar with the Heimdal client, but (sadly) the MIT KDC
> > has only 'kprop' to do a bulk dump to slaves and most places (of
> > any size) only do that infrequently, perhaps a few times a day.

> Note that dumping and propagation of Stanford's site-wide KDC database to
> two slaves takes less than a minute.

Yes, but how *often* do you do that?
A delta-update takes less than a second, of course.


John