[19004] in Kerberos
Re: Host Alias
daemon@ATHENA.MIT.EDU (yo timo)
Thu Apr 3 09:27:25 2003
Message-ID: <20030403142638.85865.qmail@web13301.mail.yahoo.com>
Date: Thu, 3 Apr 2003 06:26:38 -0800 (PST)
From: yo timo <bacolod85@yahoo.com>
To: kerberos@MIT.EDU
In-Reply-To: <b5q2fk$4hk$1@nntp6.u.washington.edu>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Errors-To: kerberos-bounces@mit.edu
Donn,
Thanks for the reply. I did some testing after I sent the message for help. I set nsswitch.conf to look at DNS first, added the "seach my.domain" statement to /etc/resolv.conf, used fullly qualified pricipals and told users to use the "host" part of the fully qualified names as an "alias." Works like a champ.
-bacolod
Donn Cave <donn@u.washington.edu> wrote:
| I have come across a usability issue where users of a network I plan
| to implement Kerberos on are currently accustomed to host aliases.
| i.e: typing 'ftp foo' instead of 'ftp foo.my.long.host.name.com.'
|
| Anyone have advice on how to get around using fully qualified hostnames
| for Kerberos host principals?
On the contrary, you certainly should use fully qualified hostnames
for Kerberos host principals. That also should work, that is, you
should be able to type 'ftp foo' and it should be automatically
expanded to the full domain name. If it isn't, the reason is likely
the short comes before the full name in /etc/hosts. The same is
true of "alias" names in the DNS CNAME sense, that they should just
work in current implementations (though perhaps not forever, if I
read the draft right.)
Donn Cave, donn@u.washington.edu
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
---------------------------------
Do you Yahoo!?
Yahoo! Tax Center - File online, calculators, forms, and more
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
