[krbdev.mit.edu #8945] krb5kdc: the 32 realms limit

"Greg Hudson via RT" <[email protected]>
Newsgroups gmane.comp.encryption.kerberos.bugs
Message-ID <[email protected]>
<URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=8945 >

For your use case, would it be better to have a separate KDB for each realm
(implying separate storage, propagation, and backup), or have one KDB to which
realms could be added and removed?

To answer one of your questions, if you ran two separate krb5kdc processes each
with 31 -r options to get around the current 32-realm limitation, they would
have to serve different ports.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.