[OpenAFS-devel] Starting fs without salvaging...

[Nathan Neulinger]

Ken Hornstein wrote:
> 
> >One of the items that concerns me is user management.  With such a large
> >system that you have, I am wondering how easy user management is?  We have
> >been toying around with the idea of making a SQL backend (most likely we
> >will use PostgreSQL) to the MIT Kerberos package.
> 
> The only people I knew that did this (well, they did it with Oracle)
> said that the performance pretty much sucked, because while things like
> PostgreSQL and Oracle are great at handling large databases and doing
> queries on them, the one place where they're not so great is database
> access time ... and that's really the thing you want on your KDC (I heard
> the same thing about people that tried out LDAP backends for their KDCs).
> 
> I'd be interested in hearing other stories, of course.  Me, I'm going to
> stick with good ol' Berkeley DB for now :-)
> 
> --Ken
> _______________________________________________
> OpenAFS-devel mailing list
> OpenAFS-devel@openafs.org
> https://lists.openafs.org/mailman/listinfo.cgi/openafs-devel

One thing I have seen that seems to help the kdc a bunch is periodically
(once every couple months) doing a kprop from the master to the master.
(or just kdb5_util dump then load), as it rebuilds the db from scratch.
BDB databases have a tendency to get quite large.

I wonder if building kdc over a auto-balancing tree based db would work
well? 

-- Nathan

------------------------------------------------------------
Nathan Neulinger                       EMail:  nneul@umr.edu
University of Missouri - Rolla         Phone: (573) 341-4841
CIS - Systems Programming                Fax: (573) 341-4216