Is there a recommended architecture/methods to scale the MIT KDC for HA and multiple physical sites?

[#1]

I will be configuring a HDP cluster with a standalone KDC. I see info on how to setup multiple KDCs

for the HDP components. How should I set up the multiple KDCs? Can I create a master KDC with an

HA pair? Has anyone deployed something like this in the real world?

[#2 · Accepted solution]

You can deploy Master Slave KDC. That will provide HA. I have done this before. You can setup replication between master and slave.

http://www.tldp.org/HOWTO/Kerberos-Infrastructure-HOWTO/server-replication.html

HTH

[#3]

Another source for master/slave configuration is https://web.mit.edu/kerberos/krb5-1.12/doc/admin/install_kdc.html