Problem with duplication of hostname
Danny Mayer
mayer at ntp.isc.org
Sun Jun 8 23:31:14 EDT 2008
Andrea Cirulli wrote:
> Hi all,
>
> I setted up kerberos on a big environment, let's say 1300 servers. We have
> one Master Kerberos and 16 Slaves. We have this problem: the environment is
> commercial so we are a little bit constrained, we are not allowed to use DNS
> nor any kind of host centralization.
Why not? DNS needs to be part of your basic infrastructure. 1300 servers
is unmanagable without it.
> We are facing with the problem that
> some server can have the same hostname. My question is there is a way to
> have multiple key (host principal) having two server with the same hostname.
>
It's most unlikely that this will work, nor do you want this to work.
> For example, let's say we have two server called host_pippo, on the kdc side
> we create host/host_pippo at REALM. This principal can be used for both the
> hosts with hostname host_pippo. Is there any workaround to discriminate
> server with the same hostname?
>
How are you going to do that? You should never allow a host with the
same name in a domain. You could use the IP addresses I guess but what's
the point of that?
> I know that kerberos without DNS managing thounsands of systems can be
> dangerous but we have no choice :-(, so any valid workaround would be
> helpful :-D
>
How about explaining why you cannot use DNS?
Danny
> Thanks in advance.
>
More information about the Kerberos
mailing list