Question: want different default_realm for service and user principles

Sam Hartman hartmans at MIT.EDU
Thu Aug 12 17:39:17 EDT 2004


>>>>> "Jeffrey" == Jeffrey Altman <jaltman2 at nyc.rr.com> writes:

    Jeffrey> The approach is a valid way of doing things.  On the Unix
    Jeffrey> system you will need to use more than one configuration
    Jeffrey> file and specify which one to use via the KRB5_CONFIG
    Jeffrey> environment variable.

You may actually be able to have default_realm set to foo.org and
then set your domain_realms section so that your local hostname's
realm maps into bar.foo.org.


The default_realm really shouldn't be used for service principals.



More information about the Kerberos mailing list