[8380] in Info-AFS_Redistribution
Re: Question about using Kerberos with AFS
daemon@ATHENA.MIT.EDU (Michael Pelletier)
Tue Jan 2 19:58:45 2001
Date: Tue, 2 Jan 2001 16:33:24 -0800 (PST)
From: Michael Pelletier <mike@alteon.com>
To: Ken Hornstein <kenh@cmf.nrl.navy.mil>
Cc: info-afs@transarc.com
In-Reply-To: <200101022152.f02LqHZ02055@ginger.cmf.nrl.navy.mil>
Message-Id: <Pine.SOL.3.95.1010102163227.20949X-100000@arrakis.alteon.com>
Mime-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
On Tue, 2 Jan 2001, Ken Hornstein wrote:
> If you have to change your realm name, you are in for lots of pain. If
> we changed our DNS domain name, I doubt I'd change our realm. But there
> were a few people who said, "Oh, sure, go ahead ... it doesn't even
> matter if they're not even close!". I'm just saying that in my opinion
> IT DOES MATTER, and if you can avoid it, you're doing yourself a favor.
> If you can't avoid it, then you can make it work ... but it's not
> completely trivial.
Is anyone out there using those TXT records for _kerberos.domain.name to
specify their realm name? Considering that BIND8 now dislikes hostnames
with underscores in them, not quite sure how well this will work.?
-Michael Pelletier.