KDC query client performance

[Nico]

On Mon, Feb 14, 2011 at 10:39:27PM -0500, Sam Hartman wrote:
> Hmm, except how do you actually track if the KDC is up?

You send bogus KDC requests and expect a KRB-ERROR back.  The bogus
request should be such that the KDC will not spend any compute resources
on crypto and will send a KRB-ERROR back.  My guess is that the simplest
such bogosity would be to send a really old from/till time in the
KDC-REQ-BODY.

Nico
--