[35983] in Kerberos
Re: ping for kdc utility?
daemon@ATHENA.MIT.EDU (Chris Hecker)
Wed Apr 2 15:58:11 2014
Message-ID: <533C6BC7.6050901@d6.com>
Date: Wed, 02 Apr 2014 12:57:59 -0700
From: Chris Hecker <checker@d6.com>
MIME-Version: 1.0
To: Benjamin Kaduk <kaduk@mit.edu>, Wang Shouhua <shouhuaw@gmail.com>
In-Reply-To: <alpine.GSO.1.10.1404021544190.21026@multics.mit.edu>
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
I use kadm5_get_privs as a ping for an admin perl script, see this thread:
http://mailman.mit.edu/pipermail/kerberos/2012-February/017811.html
Chris
On 2014-04-02 12:46, Benjamin Kaduk wrote:
> On Wed, 2 Apr 2014, Wang Shouhua wrote:
>
>> Is there such an utility which can issue a "ping" (null command) to
>> the kdc to see if it is still responding?
>
> I'm not aware of a dedicated utility. However, the KDC is basically a
> stateless UDP service, so recording a live transaction and replaying an
> input packet is expected to yield some sort of response packet. Doing
> this periodically allows for a very primitive "liveness check" which can
> be used in some monitoring setups. Of course, if one wants to monitor
> that the KDC is actually functioning properly and not just spewing error
> packets, more effort is required.
>
> -Ben Kaduk
> ________________________________________________
> Kerberos mailing list Kerberos@mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
