[24650] in Kerberos
Single DNS domain for Multiple Kerberos V5 Realms ?
daemon@ATHENA.MIT.EDU (yangurazov, rinat)
Fri Sep 16 00:52:18 2005
Message-ID: <56089AAC80E082438E7D3F0228DA368B05586D14@srmarino.eng.emc.com>
From: "yangurazov, rinat" <yangurazov_rinat@emc.com>
To: "'kerberos@mit.edu'" <kerberos@mit.edu>
Date: Fri, 16 Sep 2005 00:51:21 -0400
MIME-Version: 1.0
Content-Type: text/plain
Errors-To: kerberos-bounces@mit.edu
Hello,
Could anyone help to understand how to [domain_realm] section should look
like for the multiple Kerberos Realms configured in the single DNS domain?
For example:
DNS domain name = test.domain.com
REALM1 = test.domain.com
REALM2 = windows.root.realm
REALM3 = child1.windows.root.realm
REALM4 = child2.windows.root.realm
REALM5 = linux.test.domain.com
REALM6 = solaris.test.domain.com
Idea is to have all realms in krb5.conf file on server so depending from
which REALM request came from it will talk to the right KDC (all KDCs are in
the same DNS zone).
Based on the man pages [domain_realm] covers only DNS to REALM1 translation.
I have no idea how to correlate other REALMS to the same DNS domain name.
[domain_realm]
.test.domain.com = TEST.DOMAIN.COM
I do not know if adding more lines like
.test.domain.com = WINDOWS.ROOT.REALM
.test.domain.com = CHILD1.WINDOWS.ROOT.REALM
.test.domain.com = CHILD2.WINDOWS.ROOT.REALM
Etc.
Is supported or not.
Best regards,
Rinat Yangurazov
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
