[32799] in Kerberos
Re: What are the issues with dns_lookup_realm ?
daemon@ATHENA.MIT.EDU (Brian Candler)
Tue Oct 12 04:36:51 2010
Date: Tue, 12 Oct 2010 09:36:36 +0100
From: Brian Candler <B.Candler@pobox.com>
To: Greg Hudson <ghudson@mit.edu>
Message-ID: <20101012083636.GA3761@talktalkplc.com>
MIME-Version: 1.0
Content-Disposition: inline
In-Reply-To: <1286820744.19112.255.camel@ray>
Cc: "kerberos@mit.edu" <kerberos@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On Mon, Oct 11, 2010 at 02:12:24PM -0400, Greg Hudson wrote:
> No, it's not the domain heuristic, which is off by default anyway; it's
> the next step after the domain heuristic, which is to use the parent
> domain (uppercased) without trying to decide whether it's a real realm
> or not.
So you'd only ever fall back to default_realm if the host doesn't have a
FQDN at all?
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
