[32803] in Kerberos
Re: What are the issues with dns_lookup_realm ?
daemon@ATHENA.MIT.EDU (Greg Hudson)
Tue Oct 12 13:18:18 2010
From: Greg Hudson <ghudson@mit.edu>
To: Brian Candler <B.Candler@pobox.com>
In-Reply-To: <20101012083636.GA3761@talktalkplc.com>
Date: Tue, 12 Oct 2010 13:18:10 -0400
Message-ID: <1286903890.19112.282.camel@ray>
Mime-Version: 1.0
Cc: "kerberos@mit.edu" <kerberos@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On Tue, 2010-10-12 at 04:36 -0400, Brian Candler wrote:
> On Mon, Oct 11, 2010 at 02:12:24PM -0400, Greg Hudson wrote:
> > No, it's not the domain heuristic, which is off by default anyway; it's
> > the next step after the domain heuristic, which is to use the parent
> > domain (uppercased) without trying to decide whether it's a real realm
> > or not.
>
> So you'd only ever fall back to default_realm if the host doesn't have a
> FQDN at all?
That's correct.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
