Skip Menu |

From: "Дилян Палаузов" <>
Subject: Pushing changes to KDC replicas by synchronizing the LDAP backend
To: "krb5-bugs" <>
Date: Fri, 27 Sep 2019 11:02:02 +0000

The KDC database can be distributed by iprop/kprop, using incremental or full replication.

The KDC can store its data in LDAP backend. In LDAP servers can synchronize theirselves in the master/replica model,
e.g. as described at .

Please document what is the difference between using kprop(d) for distributing changes to the KDC replicas and using
LDAP master/replice synchronization that alter the KDC replica database.