Skip Menu |
 

From: "Дилян Палаузов" <dilyan.palauzov@aegee.org>
Subject: Pushing changes to KDC replicas by synchronizing the LDAP backend
To: "krb5-bugs" <krb5-bugs@mit.edu>
Date: Fri, 27 Sep 2019 11:02:02 +0000
Hello,

The KDC database can be distributed by iprop/kprop, using incremental or full replication.

The KDC can store its data in LDAP backend. In LDAP servers can synchronize theirselves in the master/replica model,
e.g. as described at https://openldap.org/doc/admin24/replication.html .

Please document what is the difference between using kprop(d) for distributing changes to the KDC replicas and using
LDAP master/replice synchronization that alter the KDC replica database.

Regards
Дилян