[8387] in Info-AFS_Redistribution

home help back first fref pref prev next nref lref last post

Re: Question about using Kerberos with AFS

daemon@ATHENA.MIT.EDU (Ken Hornstein)
Wed Jan 3 12:04:02 2001

Message-Id: <200101031638.f03GcPZ08021@ginger.cmf.nrl.navy.mil>
To: info-afs@transarc.com
In-reply-to: Your message of "Tue, 02 Jan 2001 21:08:49 CST."
             <3A5297C1.47D3163A@umr.edu> 
Date: Wed, 03 Jan 2001 11:38:25 -0500
From: Ken Hornstein <kenh@cmf.nrl.navy.mil>

>> >Is anyone out there using those TXT records for _kerberos.domain.name to
>> >specify their realm name?  Considering that BIND8 now dislikes hostnames
>> >with underscores in them, not quite sure how well this will work.?
>> 
>> Note that I'm one of the authors for that specification :-/
>> 
>> "Yes", but it doesn't solve all your problems.  And they work quite fine
>> with any recent version of BIND (they're not hostnames).
>
>Yep, they work just fine. Plus, we're going to see a LOT more of them as
>more sites start using MS Active Directory, as it uses them.

Note - MS Kerberos uses the SRV records, but it does _NOT_ use the TXT
records for realm name specification.

--Ken

home help back first fref pref prev next nref lref last post