Kerberos Digest, Vol 20, Issue 34

[Dodson, Robert (Alliance)]

mdj_frend at yahoo.com (mdj_kerberos) wrote:

		Date: 29 Aug 2004 02:51:45 -0700
		From: mdj_frend at yahoo.com (mdj_kerberos)
		To: kerberos at MIT.EDU
		Subject: Can I specify KDC IP address or hostname???
		Message-ID: <2db721d6.0408290151.4d57767f at posting.google.com>
		Precedence: list
		Message: 1
		
		Hi all,
		
		    Can I specify the KDC server host name or the IP address in the krb5.conf file?
		
		    Is there any adverse effect if I specify the KDC IP instead of KDC host name?? 
		
		Can any body please reply,
		
		thanks
		

One consideration would be the volatility of your network.  If you change IP addresses frequently, using the name would 

allow resetting DNS to the new IP, transparent to KDC clients.  If you set as IP, on the other hand, you can find it without 

DNS being available, although you may experience failure at other DNS-sensitive interactions.   Hope this helps.

 

Robert L. Dodson

Security Consultant 

____________________________________________________________

 

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/ms-tnef
Size: 3998 bytes
Desc: not available
Url : http://mailman.mit.edu/pipermail/kerberos/attachments/20040829/e19954a0/attachment.bin