Re: Selective kdc discovery

2020-11-04 Thread Paul B. Henson
On Sat, Oct 31, 2020 at 01:02:34AM -0400, Greg Hudson wrote: > In the MIT krb5 implementation, they are tried in the order specified, > with a 1s delay in between. I can't speak to the Java implementation, > unfortunately. Ah, so each subsequent server is only used if all the ones before it fail

Re: Selective kdc discovery

2020-11-04 Thread Paul B. Henson
On Sat, Oct 31, 2020 at 12:12:04PM +, Roland C. Dowdeswell wrote: > Last I checked with the Java implementation which is granted a very > long time ago (maybe 2012), they were used in order retrying failures > three times. I think that the default timeout was 30s between each > attempt meanin

Re: Selective kdc discovery

2020-11-04 Thread Greg Hudson
On 11/5/20 12:53 AM, Paul B. Henson wrote: > We're currently using DNS SRV records and all of our kdc's seems to have > fairly equal load. Are DNS SRV records handled differently in terms of > distributing load, or is that just a side effect of the resolver handing > them back in a different order