[7906] in Kerberos
Re: MAX Entries?
daemon@ATHENA.MIT.EDU (Dave McGuire)
Tue Sep 3 21:53:39 1996
Date: Tue, 3 Sep 1996 21:44:17 -0400 (EDT)
From: Dave McGuire <mcguire@neurotica.com>
To: Eugene Kashpureff <ekashp@alternic.net>
Cc: Jeff Taylor <jefft@uoknor.edu>, kerberos@MIT.EDU
In-Reply-To: Re: MAX Entries? (Eugene Kashpureff)
On September 3, you wrote:
> On 3 Sep 1996, Jeff Taylor wrote:
> > What is the largest number of entries someone has Kerberos vr 5 supporting? We
> > have 20,000+ entries in our database & are starting to see performance
>
> We tried doing a test of a large scale data base, using bullk
> test entries/users ... went to hell w/degredation after 15K.
> Kerb just don't scale real well.
The heavy-load performance problems of the KDC and the underlying
database strikes me as an implementation issue, rather than a protocol
issue. It wouldn't be that difficult to implement a multi-threaded
kdc with a fancy, fast database behind it. Such a reimplementation
would easily address the performance problems of which you speak here.
Regards,
-Dave McGuire
Systems Engineer
Digital Express Group, Incorporated
mcguire@digex.net
