[38630] in Kerberos
Re: clarify meaning of dns_lookup_kdc?
daemon@ATHENA.MIT.EDU (Greg Hudson)
Fri Nov 8 18:28:48 2019
To: Jerry Shipman <jes59@cornell.edu>, "kerberos@mit.edu" <kerberos@mit.edu>
From: Greg Hudson <ghudson@mit.edu>
Message-ID: <b3ed2523-eec1-5c47-6ac4-15937182fb4a@mit.edu>
Date: Fri, 8 Nov 2019 18:28:29 -0500
MIME-Version: 1.0
In-Reply-To: <F09602EE-0ACC-40AB-8A65-E2DFB2FEDACB@cornell.edu>
Content-Language: en-US
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On 11/8/19 2:58 PM, Jerry Shipman wrote:
> Hello,
> Can you clarify for me exactly what dns_lookup_kdc does?
dns_lookup_kdc=false in [libdefaults] should suppress all SRV lookups by
libkrb5 for realm KDCs, whether or not there is a [realms] section for
the realm.
In your scenario, it's possible that a locate plugin module is taking
care of the lookup. This explanation is more likely if the system is
running sssd.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
