[krbdev.mit.edu #8925] [Comment] qualify_shortname default can be harmful in LAN setups

Greg Hudson via RT rt-comment at krbdev.mit.edu
Thu Aug 13 11:15:37 EDT 2020


https://krbdev.mit.edu/rt/Ticket/Display.html?id=8925
This is a comment.  It is not sent to the Requestor(s):

Tickets 8930, 8931, and 8935 have solved most of the problems mentioned here.
(8931 actually solves the wrinkle that I previously said could not be ironed
out; Isaac had the clever idea of checking the cache by second ticket rather
than client name.)

It remains to be determined whether qualify_shortname should default to the
primary DNS search domain or "". Either setting should work much better with
these changes.




More information about the krb5-bugs mailing list