What are the issues with dns_lookup_realm ?
Greg Hudson
ghudson at MIT.EDU
Mon Oct 11 14:12:24 EDT 2010
On Mon, 2010-10-11 at 13:16 -0400, Brian Candler wrote:
> Is that the "domain heuristic"? This machine has (RedHat's version of)
> Kerberos 1.3.4, and I thought you said that capability was only introduced
> recently.
No, it's not the domain heuristic, which is off by default anyway; it's
the next step after the domain heuristic, which is to use the parent
domain (uppercased) without trying to decide whether it's a real realm
or not.
More information about the Kerberos
mailing list