What are the issues with dns_lookup_realm ?

[Brian Candler]

On Mon, Oct 11, 2010 at 02:12:24PM -0400, Greg Hudson wrote:
> No, it's not the domain heuristic, which is off by default anyway; it's
> the next step after the domain heuristic, which is to use the parent
> domain (uppercased) without trying to decide whether it's a real realm
> or not.

So you'd only ever fall back to default_realm if the host doesn't have a
FQDN at all?