host name canonicalization

Frank Balluffi frank.balluffi at db.com
Mon May 16 14:06:53 EDT 2005


It is my understanding that version 1.3.1 of MIT gss_import_name 
canonicalizes host names using DNS. Does the latest version of MIT GSSAPI 
canonicalize host names? Is it possible to configure this behavior?

Microsoft supports the KDC option NAME_CANONICALIZE (15) -- see 
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/TechRef/4a1daa3e-b45c-44ea-a0b6-fe8910f92f28.mspx. 
Does this mean host name canonicalization on the KDC? Does MIT support KDC 
option 15?

Thanks.

Frank


More information about the Kerberos mailing list