[3793] in Kerberos

home help back first fref pref prev next nref lref last post

Re: Max. 'size' of Kerberos IV database

daemon@ATHENA.MIT.EDU (Paul J Lustgraaf)
Fri Sep 2 19:18:04 1994

To: kerberos@MIT.EDU
Date: 2 Sep 1994 22:58:04 GMT
From: grpjl@iastate.edu (Paul J Lustgraaf)

In article <17025BCF6.SPGMNF@cmsa.berkeley.edu>,
Mike Friedman (510) 642-1410 <spgmnf@cmsa.Berkeley.EDU> wrote:
>In order to test Kerberos V4 with a large database, I attempted to add 20000
>principals (to a database that had only a couple of dozen entries).  But
>my expect script (that talks to kadmin) just stopped (with no messages in
>any Kerberos log files) after adding principal number 11510.  When I looked
>at the 'virtual' size of principal.pag (with ls), I saw about 1.5 gigs!  (The
>'actual' size, shown with du, was 15M).  I have plenty of file-system space
>left, but I suspect I've about reached the maximum value of a file block
>pointer for the sparse file.

We had a similar problem with sendmail alias files.  We fixed it by using
a 4K index size instead of 1K.  It dropped the virtual size from >2GB down
to a few tens of MB.

Currently, we have 27,000 principals in our Kerberos database and the virtual
size is 715MB.  Must be about time to do that to OUR Kerberos.
-- 
Paul Lustgraaf             "It's easier to apologize than to get permission."
Network Specialist                                      Grace Hopper
Iowa State University Computation Center                    grpjl@iastate.edu
Ames, IA  50011                                                  515-294-0324

home help back first fref pref prev next nref lref last post