Is a Kerberos principal always a DNS name?

[Russ Allbery]

Victor Sudakov <vas at mpeks.no-spam-here.tomsk.su> writes:

> Is a Kerberos principal always a DNS name? Can't an IP literal be used?

A Kerberos principal can be close to anything.  However, most software
that uses Kerberos will only try to use principals based on DNS names for
connecting to services unless it has an option to explicitly force the
principal name.

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>