[16371] in Kerberos-V5-bugs
Re: [krbdev.mit.edu #8837] kprop replication does not work due to
daemon@ATHENA.MIT.EDU (Ingo via RT)
Sat Oct 5 10:22:20 2019
From: "Ingo via RT" <rt@KRBDEV-PROD-APP-1.mit.edu>
In-Reply-To: <f614d2cc-891b-8e29-fce5-b2c74a04e62f@Hoeft-online.de>
Message-ID: <rt-4.4.4-85656-1570285332-838.8837-5-0@mit.edu>
To: "AdminCc of krbdev.mit.edu Ticket #8837":;
Date: Sat, 05 Oct 2019 10:22:12 -0400
MIME-Version: 1.0
Reply-To: rt@KRBDEV-PROD-APP-1.mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krb5-bugs-bounces@mit.edu
<URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=8837 >
On 2019-10-03 17:56, Greg Hudson via RT wrote:
> Do you have a setting for dns_canonicalize_hostname in krb5.conf?
This is what I use, same on master and replica KDC:
~$ cat /etc/krb5.conf
[libdefaults]
default_realm = EXAMPLE.COM
forwardable = true
proxiable = true
[realms]
EXAMPLE.COM = {
kdc = kdc10-1.example.com
kdc = kdc10-2.example.com
master_kdc = kdc10-1.example.com
admin_server = kdc10-1.example.com
}
[domain_realm]
.example.com = EXAMPLE.COM
example.com = EXAMPLE.COM
~$ sudo cat /etc/krb5kdc/kdc.conf
[kdcdefaults]
[realms]
EXAMPLE.COM = {
database_name = /var/lib/krb5kdc/principal
admin_keytab = FILE:/etc/krb5kdc/kadm5.keytab
acl_file = /etc/krb5kdc/kadm5.acl
key_stash_file = /etc/krb5kdc/stash
max_life = 10h 0m 0s
max_renewable_life = 7d 0h 0m 0s
master_key_type = des3-hmac-sha1
default_principal_flags = +preauth
}
_______________________________________________
krb5-bugs mailing list
krb5-bugs@mit.edu
https://mailman.mit.edu/mailman/listinfo/krb5-bugs
