[37310] in Kerberos
Re: Incremental propagation when KDCs are clients of a different realm
daemon@ATHENA.MIT.EDU (Toby Blake)
Mon Nov 9 10:12:45 2015
Mime-Version: 1.0
From: Toby Blake <toby@inf.ed.ac.uk>
In-Reply-To: <alpine.GSO.1.10.1511061903300.26829@multics.mit.edu>
Date: Mon, 9 Nov 2015 15:12:22 +0000
Message-Id: <7374F48A-77B5-4AA5-90BB-C92A9EB18A32@inf.ed.ac.uk>
To: Benjamin Kaduk <kaduk@mit.edu>, kerberos@mit.edu
Content-Disposition: inline
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
> On 7 Nov 2015, at 00:04, Benjamin Kaduk <kaduk@MIT.EDU> wrote:
>
[...]
> Did you investigate putting a domain_realm mapping to KDCDOMAIN in the
> alternate krb5.conf during your testing? I would expect that to allow the
> krb5_sname_to_principal behavior to be changed.
Ach, of course, yes, that does indeed seem to resolve the issue.
Cheers
Toby
--
The University of Edinburgh is a charitable body, registered in
Scotland, with registration number SC005336.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
