What are the issues with dns_lookup_realm ?

[Greg Hudson]

On Mon, 2010-10-11 at 13:16 -0400, Brian Candler wrote:
> Is that the "domain heuristic"? This machine has (RedHat's version of)
> Kerberos 1.3.4, and I thought you said that capability was only introduced
> recently.

No, it's not the domain heuristic, which is off by default anyway; it's
the next step after the domain heuristic, which is to use the parent
domain (uppercased) without trying to decide whether it's a real realm
or not.