[781] in Kerberos

home help back first fref pref prev next nref lref last post

Re: How to set up slave server?

daemon@TELECOM.MIT.EDU (Jon A. Rochlis)
Sat Aug 19 17:11:51 1989

From: jon@MIT.EDU (Jon A. Rochlis)
To: haynes@UCSCC.UCSC.EDU
Cc: kerberos@ATHENA.MIT.EDU
In-Reply-To: Jim Haynes's message of Sat, 19 Aug 89 11:45:12 -0700,


cron on the kerberos master should fire off a:

 kdb_util slave_dump slave_data_file
 kprop slave_data_file slave_hosts_file

with whatever frequency you desire.

On the slave machine(s) you need to run

  kpropd slave_data_file &
(This logs to /kerberos/kpropd.log by default.)
(You can put this in an /etc/rc type file or start it manually,
whatever you prefer) ...

The slaves must also have a srvtab with the "rcmd" service in them.
(Otherwise you'll see "can't decode authentictor" messages.)  The
slaves will accept updates only from the service "rcmd.KRB_MASTER"
where KRB_MASTER is usually kerberos and is defined in krb.h.
All the data transfered is encrypted in a session using mk_priv_msg.

You need have enough disk space on the slave to temporarily hold two
copies of the database ...

John should put this on the list of things that need documentation.

		-- Jon



home help back first fref pref prev next nref lref last post