Re: Kerberos authentication ntetwork

2015-09-09 Thread Todd Grayson
by cluster do you mean hadoop? Hadoop can (based on version, workload, and service usage pattern) get very very chatty with a KDC. Depends on what you are doing on the 10GB network; but I would say you can definitely handle the krb on the 1GB interface, but consider your principal to hostname map

Re: Kerberos authentication ntetwork

2015-09-09 Thread Brandon Allbery
On Wed, 2015-09-09 at 15:45 -0500, Ben Kim wrote: > My worry about 10G is when data traffic gets jammed or network goes down > KDC may not respond. 10G network cables are not redundant for budget reason. > My worry about 1G network is network bandwidth. I'M pretty new to Kerberos, > and as a servic

Kerberos authentication ntetwork

2015-09-09 Thread Ben Kim
Hi! I have a Kerberos KDC residing in a 6 server cluster, and the cluster is linked with 10Gb network where data gets transferred, and 1Gb network where administrators connect. Would it be better practice to have Kerberos setup on 10G data network or 1G admin network? My worry about 10G is when d