[33560] in Kerberos
Re: RFC: Turning off reverse hostname resolution by default in 1.10
daemon@ATHENA.MIT.EDU (Greg Hudson)
Thu Jul 7 08:47:07 2011
From: Greg Hudson <ghudson@mit.edu>
To: Frank Cusack <frank+krb@linetwo.net>
In-Reply-To: <CAO6nPt9iAa=GVnyJeCKU49QqTkpAvESrR68dzfa-zGooL4s4Fw@mail.gmail.com>
Date: Thu, 07 Jul 2011 08:47:03 -0400
Message-ID: <1310042823.2694.47.camel@t410>
Mime-Version: 1.0
Cc: "kerberos@MIT.EDU" <kerberos@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On Wed, 2011-07-06 at 20:08 -0400, Frank Cusack wrote:
> Yes, for "ssh host". In our case, the canonicalization is done by the
> ssh client itself though, not by the krb5 library. Now that I'm aware
> of the issue I plan to use KDC aliases instead. Does current MIT
> support that?
In MIT krb5, it's supported in the LDAP KDB back end, but not in the BDB
one at this time.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
