[36664] in Kerberos
Proper ordering of mapping entries in [domain_realms] section of
daemon@ATHENA.MIT.EDU (Todd Grayson)
Tue Dec 9 00:32:36 2014
MIME-Version: 1.0
From: Todd Grayson <tgrayson@cloudera.com>
Date: Mon, 8 Dec 2014 22:32:09 -0700
Message-ID: <CALNT6MU23svH1C+r9bES+wRpGSS0nmKxTLt9sovFb2M3jNDkTQ@mail.gmail.com>
To: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
What is the proper order for the [domain_realms] section of the krb5.conf
with regard to rules being applied when there are mixed dns FQDN, domain
names and REALMS.
Should the [domain_realms] section be listed from most specific to least
specific
for example
[domain_realm]
specific-host.domain.name = REALM.NAME
domain.name = OTHER.REALM.NAME
.domain.name = OTHER.REALM.NAME
or is it least specific to most specific?
[domain_realm]
domain.name = OTHER.REALM.NAME
.domain.name = OTHER.REALM.NAME
specific-host.domain.name = REALM.NAME
Thanks in advance!
--
Todd Grayson
Customer Operations Engineering
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
