Kerberos Replication
• Create host principals for slave KDCs
– addprinc –randkey host/hostname
• Edit /var/kerberos/krb5kdc/kpropd.conf on slave
KDCs
– Add entry for every KDC host principal
• Configure init to start kpropd -S on slave KDCs
• Add cronjob on master KDC to dump database
and run kprop regularly
– See references for link to example script