What are the issues with dns_lookup_realm ?

Brian Candler B.Candler at pobox.com
Tue Oct 12 04:36:36 EDT 2010


On Mon, Oct 11, 2010 at 02:12:24PM -0400, Greg Hudson wrote:
> No, it's not the domain heuristic, which is off by default anyway; it's
> the next step after the domain heuristic, which is to use the parent
> domain (uppercased) without trying to decide whether it's a real realm
> or not.

So you'd only ever fall back to default_realm if the host doesn't have a
FQDN at all?



More information about the Kerberos mailing list