[krbdev.mit.edu #8945] krb5kdc: the 32 realms limit
"Greg Hudson via RT" <[email protected]>
| Newsgroups | gmane.comp.encryption.kerberos.bugs |
|---|---|
| Message-ID | <[email protected]> |
<URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=8945 > For your use case, would it be better to have a separate KDB for each realm (implying separate storage, propagation, and backup), or have one KDB to which realms could be added and removed? To answer one of your questions, if you ran two separate krb5kdc processes each with 31 -r options to get around the current 32-realm limitation, they would have to serve different ports.