[3795] in Kerberos

home help back first fref pref prev next nref lref last post

Re: Max. 'size' of Kerberos IV database

daemon@ATHENA.MIT.EDU (Bruce R. Lewis)
Sat Sep 3 10:28:17 1994

To: kerberos@MIT.EDU
Date: 03 Sep 1994 14:11:23 GMT
From: brlewis@joy.mit.edu (Bruce R. Lewis)

In article <17025BCF6.SPGMNF@CMSA.BERKELEY.EDU> spgmnf@cmsa.Berkeley.EDU (Mike Friedman (510) 642-1410) writes:

   From: spgmnf@cmsa.Berkeley.EDU (Mike Friedman (510) 642-1410)
   Date: Fri, 02 Sep 94 13:26:14 PDT

   In order to test Kerberos V4 with a large database, I attempted to add 20000
   principals (to a database that had only a couple of dozen entries).  But
   my expect script (that talks to kadmin) just stopped (with no messages in
   any Kerberos log files) after adding principal number 11510.  When I looked
   at the 'virtual' size of principal.pag (with ls), I saw about 1.5 gigs!

If I understand it correctly, ndbm doubles the virtual size of the
database whenever two keys have the same hash.  Your expect script is
probably producing many principal names with the same hash value.  Try a
different algorithm for naming your 20000 principals (e.g. pseudo-random
strings).
--
     ,  Bruce R. Lewis                                          ___  
    (|  Analyst Programmer                                     ===== 
     |) Distributed Computing and Network Services            ||||||| 
  MIT'  Information Systems                                  -=======-

home help back first fref pref prev next nref lref last post