<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>question Re: kerberos High Availability in Support Questions</title>
    <link>https://community.cloudera.com/t5/Support-Questions/kerberos-High-Availability/m-p/46987#M41156</link>
    <description>&lt;P&gt;Hello Azim,&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;If you are using MIT Kerberos, you would configure one or more slave KDCs. &amp;nbsp; See "Install the slave KDCs" under the MIT Kerberos Documentation: &amp;nbsp;&lt;A href="https://web.mit.edu/kerberos/krb5-latest/doc/admin/install_kdc.html" target="_blank"&gt;https://web.mit.edu/kerberos/krb5-latest/doc/admin/install_kdc.html&lt;/A&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;You will need to run the kprop&amp;nbsp;command in a cron to synchronize the master with the slave KDCs.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Update the /etc/krb5.conf file on your hosts to include the additional KDCs for your realm. &amp;nbsp;Example:&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;FONT face="courier new,courier"&gt;[realms]&lt;/FONT&gt;&lt;BR /&gt;&lt;FONT face="courier new,courier"&gt;&amp;nbsp; &amp;nbsp; EXAMPLE.REALM = {&lt;/FONT&gt;&lt;BR /&gt;&lt;FONT face="courier new,courier"&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; kdc =&amp;nbsp;kdc1.example.com&lt;/FONT&gt;&lt;BR /&gt;&lt;FONT face="courier new,courier"&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; kdc =&amp;nbsp;kdc2.example.com&lt;/FONT&gt;&lt;BR /&gt;&lt;FONT face="courier new,courier"&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; kdc = kdc3.example.com:750&lt;/FONT&gt;&lt;BR /&gt;&lt;FONT face="courier new,courier"&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; admin_server =&amp;nbsp;kdc1.example.com&lt;/FONT&gt;&lt;BR /&gt;&lt;FONT face="courier new,courier"&gt;&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; master_kdc =&amp;nbsp;kdc1.example.com&lt;/FONT&gt;&lt;/P&gt;&lt;P&gt;&lt;FONT face="courier new,courier"&gt;&amp;nbsp; &amp;nbsp; }&lt;/FONT&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;FONT face="arial,helvetica,sans-serif"&gt;&lt;SPAN&gt;Kerberos does not support load balancing. &amp;nbsp;If a timeout occurs connecting to the first KDC in the list, the next KDC will be tried.&lt;/SPAN&gt;&lt;/FONT&gt;&lt;/P&gt;</description>
    <pubDate>Thu, 03 Nov 2016 15:59:30 GMT</pubDate>
    <dc:creator>denloe</dc:creator>
    <dc:date>2016-11-03T15:59:30Z</dc:date>
  </channel>
</rss>

