Since my last message, I came across the documentation part were it mentions the iprop_slave_poll. We’re running Kerberos 5 release 1.15.1! - Will make the proper change and the test results should make more sense!
Thanks Greg. > On Jan 12, 2020, at 5:54 PM, Greg Hudson <ghud...@mit.edu> wrote: > > On 1/10/20 8:22 PM, Tareq Alrashid wrote: >> Maybe I am missing something but changing the kdc.conf to any value... >> >> iprop_replica_poll=1s >> or even... >> iprop_replica_poll = 0.016666666666667m >> (for 1s= 1/60min!) >> >> Based on tailing the kadmind.log, it is showing the replica polling >> every 2m!? > > If you are running a release prior to 1.17, you need to use the old name > . (The old name still works in 1.17 as well.) > > Also make sure to set the value on the machine running kpropd (not the > master KDC where kadmind is run), and to restart kpropd. > > I don't think the delta time format supports floating point values, but > "1s" or just "1" should work. > >> Final question if there is any negative impact for having replicas poll at >> often as one second or maybe it is best to be at higher numbers of seconds? > Polling every second will cause a little bit of work on the replica and > the master KDC each second, and use a little bit of network traffic. > With today's computers and networks it's probably going to have much impact. ________________________________________________ Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos
