[234] in Kerberos
re: Hostname-instance problems
daemon@TELECOM.MIT.EDU (Jerome H. Saltzer)
Wed Oct 28 11:21:49 1987
To: <treese@ATHENA.MIT.EDU>
Cc: kerberos@ATHENA.MIT.EDU, treese@ATHENA.MIT.EDU
In-Reply-To: <treese@ATHENA.MIT.EDU>'s message of Wed, 28 Oct 87 09:26:43 EST
From: Jerome H. Saltzer <Saltzer@ATHENA.MIT.EDU>
> Problem:
> rvddown aggie vssys
> fails to work using Kerberos authentication. The problem is that "aggie"
> is not a valid instance name. Some programs, such as rlogin, handle this
> by calling gethostbyname() to get the canonical name, then strip off the
> domain information and lower-case the string. Instead of having every
> client do that, I propose that we make that part of mk_ap_req() as as
> standard feature.
I see one problem: it somewhat permanently associates the concept of
"instance" with "canonicalized domain name". It seems to me that
there are other good sources for instance fields. Maybe a more
suitable way is to define a kerberos library routine named
krb_hostname_to_instance() which returns a string that you can hand
to make_ap_req().
Jerry
