Re: KDC acting as both master and slave
"Roland C. Dowdeswell" <[email protected]> Thu, 31 May 2018 11:32:56 -0400
| Newsgroups | gmane.comp.encryption.kerberos.heimdal.general |
|---|---|
| Message-ID | <20180531153256.GA19366@fedora-23-dvm> |
On Thu, May 31, 2018 at 08:03:22AM -0700, Adam Lewenberg wrote:
>
> I am trying to set up a chain of KDCs where KDC1 replicates from KDC2 and
> KDC2 replicates from KDC3.
>
> Thus, KDC2 is both a master and slave.
>
> However, I cannot get this to work. If iprop-slave is running on KDC2, then
> KDC1 will not replicate from KDC2. As soon as I stop the iprop-slave
> process, KDC1 starts replicating.
>
> Is it possible to have a Heimdal KDC act as both a master and slave? If so,
> how?
It is not currently possible because ipropd-slave maintains an exclusive
lock on the log file thus preventing other writers. We will consider
taking a more liberal strategy with this lock. Can you describe your
use case a bit more to help justify this? Also, can you create an issue
in https://github.com/heimdal/heimdal to track this?
Thanks,
--
Roland C. Dowdeswell