RFC: preauth benchmarking methodology

Simo Sorce simo at redhat.com
Fri Jun 3 15:57:21 EDT 2011


On Fri, 2011-06-03 at 15:48 -0400, Marcus Watts wrote:
> Is your krb5kdc single threaded when it does a preauth choice?
> 
> Older versions of krb5kdc definitely were.  If a preauth method
> took 2 seconds to execute, that's 2 seconds during which any
> other request sent in would block -- and perhaps be redirected
> to another kdc depending on how patient the client was.

Note that MIT 1.9 can run multiple separate processes in parallel to
handle requests. But this still limits parallelism to the number of
processes you tell the kdc to fork on startup with the -w option.

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York




More information about the krbdev mailing list