[32795] in Kerberos
Re: What are the issues with dns_lookup_realm ?
daemon@ATHENA.MIT.EDU (Greg Hudson)
Mon Oct 11 14:12:32 2010
From: Greg Hudson <ghudson@mit.edu>
To: Brian Candler <B.Candler@pobox.com>
In-Reply-To: <20101011171612.GA6139@talktalkplc.com>
Date: Mon, 11 Oct 2010 14:12:24 -0400
Message-ID: <1286820744.19112.255.camel@ray>
Mime-Version: 1.0
Cc: "kerberos@mit.edu" <kerberos@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On Mon, 2010-10-11 at 13:16 -0400, Brian Candler wrote:
> Is that the "domain heuristic"? This machine has (RedHat's version of)
> Kerberos 1.3.4, and I thought you said that capability was only introduced
> recently.
No, it's not the domain heuristic, which is off by default anyway; it's
the next step after the domain heuristic, which is to use the parent
domain (uppercased) without trying to decide whether it's a real realm
or not.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
