[33555] in Kerberos
Re: RFC: Turning off reverse hostname resolution by default in 1.10
daemon@ATHENA.MIT.EDU (Jeffrey Altman)
Wed Jul 6 16:49:47 2011
X-Envelope-From: jaltman@secure-endpoints.com
X-MDaemon-Deliver-To: kerberos@mit.edu
Message-ID: <4E14CA5B.1070903@secure-endpoints.com>
Date: Wed, 06 Jul 2011 16:49:31 -0400
From: Jeffrey Altman <jaltman@secure-endpoints.com>
MIME-Version: 1.0
To: simo@redhat.com
In-Reply-To: <1309984178.8182.8.camel@willson.li.ssimo.org>
Cc: Ken Hornstein <kenh@cmf.nrl.navy.mil>, kerberos@mit.edu
Reply-To: jaltman@secure-endpoints.com
Content-Type: multipart/mixed; boundary="===============0461408101=="
Errors-To: kerberos-bounces@mit.edu
This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--===============0461408101==
Content-Type: multipart/signed; micalg=pgp-sha1;
protocol="application/pgp-signature";
boundary="------------enig69B9CE76F96EC1A39D405510"
This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--------------enig69B9CE76F96EC1A39D405510
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
On 7/6/2011 4:29 PM, Simo Sorce wrote:
> Jeffrey, as far as I understand the proposal it to simply change the
> default, I have seen no request to remove the rdns parameter, so if you=
> need reverse resolution at most you'll have to change rdns =3D true in
> krb5.conf on clients.
>=20
> It may be annoying to have to do that in a haste if you don't know in
> advance and merrily upgrade to 1.10, that's why Greg asked on the list
> before changing the default.
I will let you be the one to tell that to my grandmother when her
Kerberos client package is updated without her knowledge. With the
engineering talent available I am sure that a better solution can be
developed beyond just changing the default.
Think about this problem with your vendor hat on. How would you explain
such a change to Red Hat's customers? How does Red Hat measure the
Help Desk support costs from deploying such a change?
Something to think about. Please do not respond further.
Jeffrey Altman
--------------enig69B9CE76F96EC1A39D405510
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
iQEcBAEBAgAGBQJOFMpdAAoJENxm1CNJffh4rkgIAJ6ne08lma8SBld4oXerJFE2
WdczyZS0oUDdnBh10pW5wCxVJCBCIjGgLwRB0y8HBT0l1aWfn2QPgXb1pe3Mia9l
JaxDxGU0QSRTjT4sOrzMfczrxSgNEOWz1z0pUTbFz1zxwKuvXD5CqHMdGf+TSGIq
pMyIHfRIS/QjoQm/CiJ072peTUoACuxupd5Oy2Ynjul4qQjPjGemNRQyeDE7WCEZ
rjze8XbhyC7CyQmycNdkHiYGp2BY+htuuRzPk0EWx2qE2NtIdsixgSCWLlKY+lgo
KNOfB3t8bns4GZi/PXX8NeWtywZv1DxqOfstHc7kWp0LsYv335bCpZGDuuamt50=
=fxtM
-----END PGP SIGNATURE-----
--------------enig69B9CE76F96EC1A39D405510--
--===============0461408101==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
--===============0461408101==--
