[4936] in Kerberos
Re: Kerberos requirements (was Re: SATAN, Dan Farmer, SGI, security, etc.)
daemon@ATHENA.MIT.EDU (Larry J. Hughes Jr.)
Wed Apr 5 12:26:44 1995
To: kerberos@MIT.EDU
Date: 5 Apr 1995 15:51:45 GMT
From: hughes@logos.ucs.indiana.edu (Larry J. Hughes Jr.)
In article <3lp1s1$dos@kei.com>, Christopher Davis <ckd@loiosh.kei.com> wrote:
>Got any Sun3s around? Maybe an old 386? Kerberos KDCs are not *that*
>CPU-hungry, after all. A 386 running BSD/OS or FreeBSD or something
>should work just fine, and you can probably pick one up for free from
>some secretary's desk when it's replaced with a 486 or Pentium. Depending
>on your site's upgrade cycle, you may be able to get several of them for
>redundancy (slave servers).
Old machines like Sun3s and even Vaxstations can serve up tickets just
fine, but if you try to set up slave systems and you have a sizeable
database, forget it. I did this for a while and when our database
grew past 20,000 users (as it will for many .edu sites) it was taking
more than 2 hours for the dump-prop-reload hack to happen. It's
nearly impossible to keep the slaves in sync with the master.
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Larry J. Hughes, Jr. hughes@indiana.edu
Software Engineer http://copper.ucs.indiana.edu/~hughes
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
