[29750] in Kerberos

home help back first fref pref prev next nref lref last post

Re: Is a Kerberos principal always a DNS name?

daemon@ATHENA.MIT.EDU (Russ Allbery)
Thu Apr 24 13:50:49 2008

To: kerberos@mit.edu
In-Reply-To: <fupovd$25qp$1@relay.tomsk.ru> (Victor Sudakov's message of "Thu\,
	24 Apr 2008 10\:55\:41 +0000 \(UTC\)")
From: Russ Allbery <rra@stanford.edu>
Date: Thu, 24 Apr 2008 10:48:23 -0700
Message-ID: <87d4of16vs.fsf@windlord.stanford.edu>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

Victor Sudakov <vas@mpeks.no-spam-here.tomsk.su> writes:

> Is a Kerberos principal always a DNS name? Can't an IP literal be used?

A Kerberos principal can be close to anything.  However, most software
that uses Kerberos will only try to use principals based on DNS names for
connecting to services unless it has an option to explicitly force the
principal name.

-- 
Russ Allbery (rra@stanford.edu)             <http://www.eyrie.org/~eagle/>
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post