[38227] in Kerberos
Re: Determening the number of clients per KDC
daemon@ATHENA.MIT.EDU (=?UTF-8?Q?Mark_Pr=c3=b6hl?=)
Tue Apr 17 04:26:24 2018
To: kerberos@mit.edu
From: =?UTF-8?Q?Mark_Pr=c3=b6hl?= <mark@mproehl.net>
Message-ID: <89dd606a-38a9-7fc4-68dc-25e04308dcaa@mproehl.net>
Date: Tue, 17 Apr 2018 10:25:55 +0200
MIME-Version: 1.0
In-Reply-To: <87d0yz6tf6.fsf@hope.eyrie.org>
Content-Language: en-US
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On 04/16/2018 05:51 PM, Russ Allbery wrote:
> ... Clients
> aren't going to generally all try to get a ticket at the same time, due to
> ticket caching, so that scales to a lot of clients.
>
I have only seen JAVA/JAAS clients caching the TGT and not the service
tickets. Especially in Hadoop environments this leads to much more TGS
traffic than in "classical" Kerberos environments. 1000 rps are not unusual.
- Mark
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
