RFC: preauth benchmarking methodology
Simo Sorce
simo at redhat.com
Fri Jun 3 15:57:21 EDT 2011
On Fri, 2011-06-03 at 15:48 -0400, Marcus Watts wrote:
> Is your krb5kdc single threaded when it does a preauth choice?
>
> Older versions of krb5kdc definitely were. If a preauth method
> took 2 seconds to execute, that's 2 seconds during which any
> other request sent in would block -- and perhaps be redirected
> to another kdc depending on how patient the client was.
Note that MIT 1.9 can run multiple separate processes in parallel to
handle requests. But this still limits parallelism to the number of
processes you tell the kdc to fork on startup with the -w option.
Simo.
--
Simo Sorce * Red Hat, Inc * New York
More information about the krbdev
mailing list