[37397] in Kerberos
Re: kprop with multiple or NATted IP address
daemon@ATHENA.MIT.EDU (Russ Allbery)
Thu Jan 28 15:56:55 2016
From: Russ Allbery <eagle@eyrie.org>
To: Jerry Shipman <jes59@cornell.edu>
In-Reply-To: <18C94D30-2C39-49F5-A35A-A5C2DF1C4B51@cornell.edu> (Jerry
Shipman's message of "Thu, 28 Jan 2016 13:25:21 +0000")
Date: Thu, 28 Jan 2016 12:55:11 -0800
Message-ID: <871t91o24w.fsf@hope.eyrie.org>
MIME-Version: 1.0
Cc: "kerberos@mit.edu" <kerberos@mit.edu>
Content-Type: text/plain; charset="utf-8"
Errors-To: kerberos-bounces@mit.edu
Content-Transfer-Encoding: 8bit
Jerry Shipman <jes59@cornell.edu> writes:
> (I thought about that about 5 minutes after I sent the email — oops.)
> I guess my question is: does kprop do anything other than: secrecy of
> the data in transmission, integrity of the transmission, kdb5_util
> dump/load ? Or can I really do the same thing in a cron job (or maybe 2,
> one on each end) without missing anything important? I guess I would
> lose out on the possibility of doing incremental propagation.
You lose incremental propagation, but other than that, I'm pretty sure
kprop/kpropd is just an authenticated copy of a dump and loading it on the
other end.
--
Russ Allbery (eagle@eyrie.org) <http://www.eyrie.org/~eagle/>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
