Subject: Re: kdc rc.d startup [was: rc.d: time synchronization issues ...]
To: Nathan J. Williams <>
From: Jason Thorpe <>
List: tech-userlevel
Date: 03/16/2005 09:11:27
On Mar 16, 2005, at 9:07 AM, Nathan J. Williams wrote:

> That doesn't sound right. The KDC is principally providing a
> network-wide service. The other services in the world trying to use it
> have to cope with it not being there while the KDC's host is booting;
> other servers that run on the KDC machine (you run other services on
> the KDC machine?!?!?!?!) can cope just as well with that as with the
> temporary disappearance of a foriegn KDC.

...unless the KDC is running a caching name server.  Consider e.g. an 
Open Directory server, that provides DNS, LDAP, and Kerberos services.

>> I have been thinking about directory services in NetBSD a bit lately,
>> and I think it might make sense to have a DIRECTORY pseudo-service
>> that directory service providers (such as Kerberos, DNS, and other
>> things associated with them) can BEFORE and that other things can
> Kerberos is not a directory service.

Not by itself, but it is a fundamental component of some directory 

-- thorpej