Admin SRV RR support
Greg Hudson
ghudson at MIT.EDU
Thu Dec 2 19:36:24 EST 2010
On Thu, 2010-12-02 at 19:26 -0500, Greg Hudson wrote:
> On Wed, 2010-12-01 at 17:56 -0500, Jaap Winius wrote:
> > Does anyone have any idea when MIT Kerberos is likely to include support
> > for the _kerberos-adm._tcp SRV resource record?
>
> > My tests with the packages that currently come with Debian squeeze
> > suggest that this particular DNS functionality is still lacking. Could
> > this be one of the reasons why Heimdal is often used instead?
>
> What tests are you running? We've had support for this for quite some
> time, at least as far back as 1.4.
A little more investigation indicates that we use _kerberos-adm SRV
records for password changes, but not for the kadmin client.
I don't know if this is a particularly strong driver of implementation
choice as you suggest, but I'll make a note to try to implement this for
1.10.
More information about the Kerberos
mailing list