[24652] in Kerberos
RE: Single DNS domain for Multiple Kerberos V5 Realms ?
daemon@ATHENA.MIT.EDU (yangurazov, rinat)
Fri Sep 16 10:35:27 2005
Message-ID: <56089AAC80E082438E7D3F0228DA368B05586D1A@srmarino.eng.emc.com>
From: "yangurazov, rinat" <yangurazov_rinat@emc.com>
To: "'Douglas E. Engert'" <deengert@anl.gov>
Date: Fri, 16 Sep 2005 10:34:38 -0400
MIME-Version: 1.0
Content-Type: text/plain
cc: "'kerberos@mit.edu'" <kerberos@mit.edu>
Errors-To: kerberos-bounces@mit.edu
"The [domain_realm] section provides a translation from a domain name or
hostname to a Kerberos realm name"
^^^^^^^^
from:
http://web.mit.edu/kerberos/krb5-1.4/krb5-1.4.2/doc/krb5-admin/domain_realm.
html#domain_realm
You may have add the individual hostnames.
Or add more DNS subdomains and rename your hosts to distinguish between the
realms,
you imply it is a "test.domain"
[Rinat] Thank you.
1 case will make krb5.conf thouthands lines long.
2 case is not a good idea for existing DNS infrastructure (actually not only
DNS infrastructure will be impacted) + adds more TCO to it.
I was wondering if there is way to have this type of record in
[domain_realm] section?
.test.domain.com = WINDOWS.ROOT.REALM ; CHILD1.WINDOWS.ROOT.REALM ;
CHILD2.WINDOWS.ROOT.REALM
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
