need project review

Jeffrey Hutzelman jhutz at
Tue Apr 8 11:24:24 EDT 2008

--On Monday, April 07, 2008 03:59:56 PM -0700 "Henry B. Hotz" 
<hotz at> wrote:

> The above is nice flexibility, but it doesn't help as much as you'd
> like, if you need to recode the database to eliminate use of an old
> master key.  Even if you didn't shut down during the recode, the KDC
> wouldn't be responding as fast as normal.

So?  When's the last time anyone, anywhere, reporting KDC performance being 
a significant issue?  And if it is, just rate-limit the recoding.

More information about the krbdev mailing list