[8391] in Info-AFS_Redistribution
RE: Question about using Kerberos with AFS
daemon@ATHENA.MIT.EDU (Neulinger, Nathan R.)
Wed Jan 3 12:37:39 2001
Message-Id: <F349BC4F5799D411ACE100D0B706B3BB1D393E@umr-mail03.cc.umr.edu>
From: "Neulinger, Nathan R." <nneul@umr.edu>
To: "'Ken Hornstein'" <kenh@cmf.nrl.navy.mil>, info-afs@transarc.com
Date: Wed, 3 Jan 2001 11:14:29 -0600
Mime-Version: 1.0
Content-Type: text/plain;
charset="ISO-8859-1"
Oh. Yeah... Good point.
Microsoft pretty much forces your DNS name to match the realm name, among
other things.
-- Nathan
> -----Original Message-----
> From: Ken Hornstein [mailto:kenh@cmf.nrl.navy.mil]
> Sent: Wednesday, January 03, 2001 10:38 AM
> To: info-afs@transarc.com
> Subject: Re: Question about using Kerberos with AFS
>
>
> >> >Is anyone out there using those TXT records for
> _kerberos.domain.name to
> >> >specify their realm name? Considering that BIND8 now
> dislikes hostnames
> >> >with underscores in them, not quite sure how well this will work.?
> >>
> >> Note that I'm one of the authors for that specification :-/
> >>
> >> "Yes", but it doesn't solve all your problems. And they
> work quite fine
> >> with any recent version of BIND (they're not hostnames).
> >
> >Yep, they work just fine. Plus, we're going to see a LOT
> more of them as
> >more sites start using MS Active Directory, as it uses them.
>
> Note - MS Kerberos uses the SRV records, but it does _NOT_ use the TXT
> records for realm name specification.
>
> --Ken
>
