[44167] in Hotline Meeting
Re: Kerberos server cut over to Kerberos V5
daemon@ATHENA.MIT.EDU (Roger A. Roach)
Tue Jul 14 11:17:18 1998
To: "Theodore Y. Ts'o" <tytso@MIT.EDU>
Cc: athena-outage@MIT.EDU
In-Reply-To: Your message of "Wed, 08 Jul 1998 02:31:18 EDT."
<199807080631.CAA23930@dcl.MIT.EDU>
Date: Tue, 14 Jul 1998 11:17:09 EDT
From: "Roger A. Roach" <rar@MIT.EDU>
Ted,
I notice that my tickets seem to be lasting only 8 hours instead of 10 hours.
Is this due to this change or me going to Athena 8.2? Is there a way to
change the default for my workstation?
Roger
>
> Starting at 23:40 on Tuesday night, we began the process of migrating
> the Kerberos server from an old, tired Decstations 5000/25 running
> Kerberos V4 to a new Sparcstation 20 running our new Kerberos V5 code.
> The cutover to the Kerberos server happened at 12:42am, with the new
> Kerberos server being fully operational (password changing re-enabled)
> at 1:30am.
>
> The only user-visible outages during this cutover was that password
> changing and user registrations were disabled during 23:40pm and 1:30am,
> and there was approximately a 20 second window when kerberos.mit.edu was
> unavailable, and kerberos authentication requests fell back to the
> backup slave at kerberos-1.mit.edu, adding a 1 second delay during the
> 20 seconds when the old kerberos server was taken off the air and when
> the new kerberos server came up on kerberos's IP address.
>
> Users should observe no differences between the V4 and V5 servers,
> except that password changes will take effect for V5 ticket requests
> much more rapidly than we did in the past.
>
> If there are any questions about this cutover, please let me know.
>
> - Ted
>
