[22634] in Kerberos
Re: Kerberos behind load balancer?
daemon@ATHENA.MIT.EDU (Ken Hornstein)
Wed Oct 6 13:15:26 2004
Message-Id: <200410061714.i96HEYXw004401@ginger.cmf.nrl.navy.mil>
To: kerberos@mit.edu
In-Reply-To: <2BF615FBFB12BB47B6501D04376E657A0B0A78@MAILFS1.uta.edu>
Date: Wed, 06 Oct 2004 13:14:34 -0400
From: Ken Hornstein <kenh@cmf.nrl.navy.mil>
Errors-To: kerberos-bounces@mit.edu
>If we could modify DNS to do DNS round-robin, we too would be okay. But
>we can't.
This is the part I don't understand. _WHY_ do you think you need
this? I've literally run 6 years with a very simple setup: two KDCs,
each one listed in DNS and our krb5.conf. On the rare occasions we
lose a master, the backup answers requests. I either fix the master or
bring up the slave as the master temporarily (it usually takes me a
while to notice this, because everything keeps running normally). This
is pretty much what everyone I know does. We'd all like multi-master, but
it hasn't impacted operations in my experience.
--Ken
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
