[lvs-users] ldirectord and kerberos

Graeme Fowler graeme at graemef.net
Thu Feb 24 20:31:42 GMT 2011


On Thu, 2011-02-24 at 19:48 +0100, L.S. Keijser wrote:
> actually, AFAIK kerberos is not 'LVS-compatible'. See:

That's missing the point slightly, Leon - what I believe Andrew is after
is the ability for ldirectord to use a previously obtained & cached
Kerberos TGT to obtain a Kerberos service ticket from a KDC and use that
in the healthcheck process against the realservers.

Phew, I typed all the above without taking a breath ;)

With ldirectord being written in Perl, and there being a pretty well
documented module Authen::Krb5 available - it's possible. But right now
ldirectord doesn't do that.

Graeme





More information about the lvs-users mailing list