Re: KDC acting as both master and slave

"Roland C. Dowdeswell" <[email protected]> Thu, 31 May 2018 11:32:56 -0400
Newsgroups gmane.comp.encryption.kerberos.heimdal.general
Message-ID <20180531153256.GA19366@fedora-23-dvm>
On Thu, May 31, 2018 at 08:03:22AM -0700, Adam Lewenberg wrote:
>

> I am trying to set up a chain of KDCs where KDC1 replicates from KDC2 and
> KDC2 replicates from KDC3.
> 
> Thus, KDC2 is both a master and slave.
> 
> However, I cannot get this to work. If iprop-slave is running on KDC2, then
> KDC1 will not replicate from KDC2. As soon as I stop the iprop-slave
> process, KDC1 starts replicating.
> 
> Is it possible to have a Heimdal KDC act as both a master and slave? If so,
> how?

It is not currently possible because ipropd-slave maintains an exclusive
lock on the log file thus preventing other writers.  We will consider
taking a more liberal strategy with this lock.  Can you describe your
use case a bit more to help justify this?  Also, can you create an issue
in https://github.com/heimdal/heimdal to track this?

Thanks,

-- 
    Roland C. Dowdeswell