[19133] in Kerberos_V5_Development
Re: Proposal for using NAPTR/URI records
daemon@ATHENA.MIT.EDU (Benjamin Kaduk)
Fri Feb 27 16:17:24 2015
Date: Fri, 27 Feb 2015 16:17:08 -0500 (EST)
From: Benjamin Kaduk <kaduk@mit.edu>
To: "krbdev@mit.edu" <krbdev@mit.edu>
In-Reply-To: <CAK3OfOhm_nCxjzsVCpUoMUAjx9cQL8vLPkbHKWXdA5yG6eq1RA@mail.gmail.com>
Message-ID: <alpine.GSO.1.10.1502271616410.3953@multics.mit.edu>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
On Fri, 27 Feb 2015, Nico Williams wrote:
> On Fri, Feb 27, 2015 at 10:52 AM, Simo Sorce <simo@redhat.com> wrote:
> > On Fri, 2015-02-27 at 10:38 -0600, Nico Williams wrote:
> >> I think this adds up to: multiple DNS queries, with some local
> >> configuration will be needed to decide on a DNS query order.
> >
> > My preference would be to implement the URI protocol, but not enable
> > querying for it by default in 1.14, add a tunable in [libdefaults ]
> > called something like dns_uri_lookup_kdc = false|true|only and set it to
> > false by default, change it to true later on ? (let downstream change
> > the default if they so desire)
>
> Yes, this. Eventually this should be enabled by default. We can give
> sites a couple of years to move to URI RRs instead of SRV RRs.
That seems a reasonable and realistic way to effect such a tranasition,
yes.
-Ben
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
