[38310] in Kerberos

home help back first fref pref prev next nref lref last post

CNAMEs instead of explicit host names

daemon@ATHENA.MIT.EDU (Cory Albrecht)
Fri Aug 24 16:45:23 2018

MIME-Version: 1.0
From: Cory Albrecht <cory@albrecht.name>
Date: Fri, 24 Aug 2018 16:12:30 -0400
Message-ID: <CAMW5rY+KHiw23aeOi9sbtho1L+-Q9v+ecB9xTiOWAKChc3QNwg@mail.gmail.com>
To: kerberos@mit.edu
Reply-To: cory@albrecht.name
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

Am I going to run into any trouble if use a CNAME that redirects to my KDCs
actual hostnames instead of explicitly listing all of them in krb5.conf on
the clients? That way I wouldn't have to copy new krb5.confs to the client
hosts, just update the DNS entry.
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post