On Sat, Oct 31, 2020 at 01:02:34AM -0400, Greg Hudson wrote:
> In the MIT krb5 implementation, they are tried in the order specified,
> with a 1s delay in between. I can't speak to the Java implementation,
> unfortunately.
Ah, so each subsequent server is only used if all the ones before it
fail
On Sat, Oct 31, 2020 at 12:12:04PM +, Roland C. Dowdeswell wrote:
> Last I checked with the Java implementation which is granted a very
> long time ago (maybe 2012), they were used in order retrying failures
> three times. I think that the default timeout was 30s between each
> attempt meanin
On 11/5/20 12:53 AM, Paul B. Henson wrote:
> We're currently using DNS SRV records and all of our kdc's seems to have
> fairly equal load. Are DNS SRV records handled differently in terms of
> distributing load, or is that just a side effect of the resolver handing
> them back in a different order