[44093] in Hotline Meeting
Kerberos server cut over to Kerberos V5
daemon@ATHENA.MIT.EDU (Theodore Y. Ts'o)
Wed Jul 8 02:31:26 1998
Date: Wed, 8 Jul 1998 02:31:18 -0400
From: "Theodore Y. Ts'o" <tytso@MIT.EDU>
To: athena-outage@MIT.EDU
Starting at 23:40 on Tuesday night, we began the process of migrating
the Kerberos server from an old, tired Decstations 5000/25 running
Kerberos V4 to a new Sparcstation 20 running our new Kerberos V5 code.
The cutover to the Kerberos server happened at 12:42am, with the new
Kerberos server being fully operational (password changing re-enabled)
at 1:30am.
The only user-visible outages during this cutover was that password
changing and user registrations were disabled during 23:40pm and 1:30am,
and there was approximately a 20 second window when kerberos.mit.edu was
unavailable, and kerberos authentication requests fell back to the
backup slave at kerberos-1.mit.edu, adding a 1 second delay during the
20 seconds when the old kerberos server was taken off the air and when
the new kerberos server came up on kerberos's IP address.
Users should observe no differences between the V4 and V5 servers,
except that password changes will take effect for V5 ticket requests
much more rapidly than we did in the past.
If there are any questions about this cutover, please let me know.
- Ted
