[29715] in Kerberos

home help back first fref pref prev next nref lref last post

Re: max number of requests/sec (on KDC)

daemon@ATHENA.MIT.EDU (Russ Allbery)
Tue Apr 22 17:12:50 2008

To: kerberos@mit.edu
In-Reply-To: <fulg03$bce$1@news.ks.uiuc.edu> (Christopher D. Clausen's message
	of "Tue\, 22 Apr 2008 14\:57\:05 -0500")
From: Russ Allbery <rra@stanford.edu>
Date: Tue, 22 Apr 2008 14:10:49 -0700
Message-ID: <87r6cxvbmu.fsf@windlord.stanford.edu>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

"Christopher D. Clausen" <cclausen@acm.org> writes:

> If you are running jobs under the same keytab, why not have one that
> kinits with the keytab and then sequentially runs each thing that you
> want run using the same krb5cc for each job?
>
> You can just have all of these jobs share the same ktb5cc and NOT kinit 
> multple times.

You can also use k5start -H, which will only obtain new tickets if the
existing ticket cache is going to expire.

    http://www.eyrie.org/~eagle/software/kstart

This problem was one of the main reasons why I added keytab support for
the -H flag, since we were running into the same issue with some cron
jobs.

-- 
Russ Allbery (rra@stanford.edu)             <http://www.eyrie.org/~eagle/>
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post