How to test the load of an authorization service that works over the Kerberos protocol?

Question

Windows

Good afternoon. The customer set a task, unfortunately I don’t have much experience with this, but nevertheless, as a tester, it was assigned to me. Our team on a test environment raised an authorization server in Java, which, using the Kerberos protocol, receives account data from Active Directory and if the user (his computer, account) is in the domain, then authorizes him and redirects to another service available to authorized users.
We set the task to test the load on the server of thousands of users. However, it is not at all clear to me how to carry out the load when I run the script for testing on a computer that is in the domain (that is, I am already in the domain by default and I no longer need to receive a ticket), so how to generate the input of thousands of unique users? And is it possible. If the customer wants the test to be carried out on his combat environment, on his local network.

Answer 1

I'm not a real welder, but I see the path as the whole idiotic problem statement.
We take a linux machine (forgive me, I'm here from my bell tower) set up kerberos and write a stupid script to check kinit usertest , then you can see . Another point is how to parallelize it?
I think in win you can throw such things through powershell or take a ready-made library from the same java.
That's right, your car is just an intermediary. Conditionally imagine there would be two AD and they are in a trust relationship with each other. When asked by the user, one of them gives this information.
Watch a video that explains very well how this kitchen works
https://vimeo.com/134560237.
Perhaps you will then have other thoughts on how to solve your "problem".
I also want to note for reference, although this is not your headache. The organization must have a connection license, even if you use such a tricky proxy as java. A little more about this is said in the video above.