Re: Data privacy in KDC

2019-03-04 Thread Yegui Cai
Hi Greg. Thanks a lot for your reply. A further question regarding 3. The database files (principle, principal.kadm5) are not encrypted, am I right? Best, Yegui On Mon, Mar 4, 2019 at 12:16 PM Greg Hudson wrote: > On 3/4/19 11:45 AM, Yegui Cai wrote: > > 1. If I have multiple tenants sharing t

Re: Data privacy in KDC

2019-03-04 Thread Greg Hudson
On 3/4/19 11:45 AM, Yegui Cai wrote: > 1. If I have multiple tenants sharing the same KDC (say, a tenant is mapped > into a realm), how KDC make sure that the data is segregated between realms? The best option is probably to run separate KDC processes for each realm, with each process listening to

Data privacy in KDC

2019-03-04 Thread Yegui Cai
Hi all. I have some questions regarding data privacy in KDC. 1. If I have multiple tenants sharing the same KDC (say, a tenant is mapped into a realm), how KDC make sure that the data is segregated between realms? 2. Similar questions regarding logs. Is there any way to segregate logs between