[29715] in Kerberos
Re: max number of requests/sec (on KDC)
daemon@ATHENA.MIT.EDU (Russ Allbery)
Tue Apr 22 17:12:50 2008
To: kerberos@mit.edu
In-Reply-To: <fulg03$bce$1@news.ks.uiuc.edu> (Christopher D. Clausen's message
of "Tue\, 22 Apr 2008 14\:57\:05 -0500")
From: Russ Allbery <rra@stanford.edu>
Date: Tue, 22 Apr 2008 14:10:49 -0700
Message-ID: <87r6cxvbmu.fsf@windlord.stanford.edu>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
"Christopher D. Clausen" <cclausen@acm.org> writes:
> If you are running jobs under the same keytab, why not have one that
> kinits with the keytab and then sequentially runs each thing that you
> want run using the same krb5cc for each job?
>
> You can just have all of these jobs share the same ktb5cc and NOT kinit
> multple times.
You can also use k5start -H, which will only obtain new tickets if the
existing ticket cache is going to expire.
http://www.eyrie.org/~eagle/software/kstart
This problem was one of the main reasons why I added keytab support for
the -H flag, since we were running into the same issue with some cron
jobs.
--
Russ Allbery (rra@stanford.edu) <http://www.eyrie.org/~eagle/>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos