[5377] in Kerberos
replacement for kprop?
daemon@ATHENA.MIT.EDU (Derrick J. Brashear)
Tue Jun 13 16:35:02 1995
To: kerberos@MIT.EDU
Date: Tue, 13 Jun 1995 15:34:58 -0400
From: "Derrick J. Brashear" <db74+@andrew.cmu.edu>
Hi,
Has anyone considered any sort of means of replacing kprop, i.e.
something where an entire database would not need to be propagated
(probably at some point in time after password changes etc have already
taken place) to something transaction based? My thoughts:
Assuming the model of master-slave(s) is to be kept, the kadmind
listening on the master attempts to forward all transactions to it's
slaves. Any slaves which are not responding have the transaction
enqueued to be performed when the slave can be contacted again. If a
certain "timeout" period elapses, the slave instead gets a fresh
database from the master when it can be contacted, and any enqueued
transactions are removed.
I'm open to other ideas, as well.
-D
