Proxy for Kerberos?

John Hascall john at
Sat Jul 29 08:38:45 EDT 2006

> John Hascall <john at> writes:
> > I'm only familiar with the Heimdal client, but (sadly) the MIT KDC
> > has only 'kprop' to do a bulk dump to slaves and most places (of
> > any size) only do that infrequently, perhaps a few times a day.

> Note that dumping and propagation of Stanford's site-wide KDC database to
> two slaves takes less than a minute.

Yes, but how *often* do you do that?
A delta-update takes less than a second, of course.


More information about the krbdev mailing list