[8365] in Info-AFS_Redistribution
Re: Question about using Kerberos with AFS
daemon@ATHENA.MIT.EDU (Ken Hornstein)
Fri Dec 29 12:28:22 2000
Message-Id: <200012291703.eBTH3JZ11679@ginger.cmf.nrl.navy.mil>
To: info-afs@transarc.com
In-Reply-To: Your message of "Thu, 28 Dec 2000 15:43:17 EST."
<Pine.LNX.4.10.10012281528320.31728-100000@ruby.ccmr.cornell.edu>
Date: Fri, 29 Dec 2000 12:03:18 -0500
From: Ken Hornstein <kenh@cmf.nrl.navy.mil>
>> Also, does the Kerberos realm have to match the DNS domain name of the
>> machines in the realm?
>
>No. The realm is specified in a config file on the client. Current
>thinking here is don't even bother making it match the DNS domain.
>That way when the burrowcrats rename your organization and decide you
>have to change the domain name to match, you won't be compelled to
>change the realm name, too.
Puh-LEASE be careful when you say this. The _only_ person I ever knew
who ran a V5 realm with AFS that didn't match his domain name regretted
it for a long time. I heard him say over and over, "If I had known all
the problems it caused, I would have never done it".
--Ken
