[16852] in Kerberos_V5_Development
Re: RFC: preauth benchmarking methodology
daemon@ATHENA.MIT.EDU (Simo Sorce)
Mon Jun 6 14:04:59 2011
From: Simo Sorce <simo@redhat.com>
To: krbdev@mit.edu
In-Reply-To: <E1QSaMN-0001Ub-1H@bruson.ifs.umich.edu>
Date: Fri, 03 Jun 2011 15:57:21 -0400
Message-ID: <1307131041.2613.118.camel@willson.li.ssimo.org>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
On Fri, 2011-06-03 at 15:48 -0400, Marcus Watts wrote:
> Is your krb5kdc single threaded when it does a preauth choice?
>
> Older versions of krb5kdc definitely were. If a preauth method
> took 2 seconds to execute, that's 2 seconds during which any
> other request sent in would block -- and perhaps be redirected
> to another kdc depending on how patient the client was.
Note that MIT 1.9 can run multiple separate processes in parallel to
handle requests. But this still limits parallelism to the number of
processes you tell the kdc to fork on startup with the -w option.
Simo.
--
Simo Sorce * Red Hat, Inc * New York
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
