Thanks for response.
I will try it.
But as Markus mentioned before, authentication doesn't need any configured
KDCs because it looks into AD - it didn't help for me maybe caused by one kdc
entry in the realm section you mentioned below.
I hope I find time to test both scenarios.
Regards
Andrew
Am Freitag, 2. Oktober 2009 22:26:19 schrieb andrew:
> Mrvka Andreas wrote:
> > Hi list,
> >
> > does anybody know if there is any change to define a backup kerberos
> > authentication server?
> >
> > Do I have to set anything in krb5.conf to support more than one AD
> > server?
> >
> > If I want to reboot the kerberos server squid should still be able to
> > authenticate.
> >
> > Are there any hints?
> >
> > Regards
> > Andrew
>
> Try several "kdc" lines in the /etc/krb5.conf file.
> Like this
>
> [realms]
> DOMAIN.BLA = {
> kdc = kerbserver1.domain.bla
> kdc = kerbserver2.domain.bla
>
> }
>
>
> HTH,
>
> Andrew
>
