[33557] in Kerberos
Re: RFC: Turning off reverse hostname resolution by default in 1.10
daemon@ATHENA.MIT.EDU (Frank Cusack)
Wed Jul 6 20:09:00 2011
MIME-Version: 1.0
In-Reply-To: <201107061727.p66HROpE002297@outgoing.mit.edu>
Date: Wed, 6 Jul 2011 17:08:55 -0700
Message-ID: <CAO6nPt9iAa=GVnyJeCKU49QqTkpAvESrR68dzfa-zGooL4s4Fw@mail.gmail.com>
From: Frank Cusack <frank+krb@linetwo.net>
To: ghudson@mit.edu
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On Wed, Jul 6, 2011 at 10:27 AM, <ghudson@mit.edu> wrote:
> Does anyone on this list intentionally rely on PTR lookups for
> Kerberos hostname canonicalization?
>
Yes, for "ssh host". In our case, the canonicalization is done by the ssh
client itself though, not by the krb5 library. Now that I'm aware of the
issue I plan to use KDC aliases instead. Does current MIT support that?
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
