[38230] in Kerberos
Re: Determening the number of clients per KDC
daemon@ATHENA.MIT.EDU (Sergei Gerasenko)
Tue Apr 17 20:05:43 2018
Mime-Version: 1.0 (Mac OS X Mail 11.2 \(3445.5.20\))
From: Sergei Gerasenko <gerases@gmail.com>
In-Reply-To: <87sh7tzd9o.fsf@hope.eyrie.org>
Date: Tue, 17 Apr 2018 19:05:21 -0500
Message-Id: <4694230C-B0B2-4641-90AB-3CE0520069D4@gmail.com>
To: Russ Allbery <eagle@eyrie.org>
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="utf-8"
Errors-To: kerberos-bounces@mit.edu
Content-Transfer-Encoding: 8bit
> On Apr 17, 2018, at 5:20 PM, Russ Allbery <eagle@eyrie.org> wrote:
>
> Mark Pröhl <mark@mproehl.net> writes:
>> On 04/16/2018 05:51 PM, Russ Allbery wrote:
>
>>> ... Clients aren't going to generally all try to get a ticket at the
>>> same time, due to ticket caching, so that scales to a lot of clients.
>
>> I have only seen JAVA/JAAS clients caching the TGT and not the service
>> tickets. Especially in Hadoop environments this leads to much more TGS
>> traffic than in "classical" Kerberos environments. 1000 rps are not
>> unusual.
Thank you for pointing that out! I have no idea what to expect from the version of Java that is going to be used. I hope I’ll find a work-around if that’s the case.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
