Re: KDC model and atomicity

Luke Howard <[email protected]> Fri, 15 Jun 2012 16:51:41 +1000
Newsgroups gmane.ietf.krb-wg
Message-ID <[email protected]>
On 14/06/2012, at 5:50 PM, Henry B. Hotz wrote:

> It occurs to me that in the process of dealing with Nico's global atomicity issue, that we've invented another KDB characteristic that's just as alien to current implementations: a partitioning between some as-yet hypothetical local statistics data, and the ordinary global data.  I don't think we intended to diverge from existing practice that far.

Well, the MIT account lockout implementation uses non-replicated attributes for failed login attempts, etc, similar to AD.

-- Luke
_______________________________________________
ietf-krb-wg mailing list
[email protected]
https://lists.anl.gov/mailman/listinfo/ietf-krb-wg