[3887] in Kerberos
Re: hierarchical realms
daemon@ATHENA.MIT.EDU (Paul Pomes)
Wed Sep 21 16:52:09 1994
To: kerberos@MIT.EDU
Date: 21 Sep 1994 17:58:34 GMT
From: p-pomes@mirage.cso.uiuc.edu (Paul Pomes)
Reply-To: P-Pomes@uiuc.edu
John Gardiner Myers <jgm+@CMU.EDU> writes:
>I'd have to say this is one of the most annoying mis-designs of the
>implementation. A single line
>
>.iastate.edu IASTATE.EDU
>
>should suffice--the library should look for the longest matching
>entry. But no, there has to be one entry for each non-leaf name.
I'll have to agree here. At UIUC we have domains per-department.
My last count was 201 domains with another 100+ still to be assigned.
I either have to pre-assign the missing domains or arrange for distribution
of updated krb.realms files. Even if I pre-assign, I'll still have the
update problem if any department changes or a new one is created.
/pbp
--
Necessity is the argument of tyrants, it is the creed of slaves.
--William Pitt (1783)
