What are the issues with dns_lookup_realm ?

[Greg Hudson]

On Tue, 2010-10-12 at 04:36 -0400, Brian Candler wrote:
> On Mon, Oct 11, 2010 at 02:12:24PM -0400, Greg Hudson wrote:
> > No, it's not the domain heuristic, which is off by default anyway; it's
> > the next step after the domain heuristic, which is to use the parent
> > domain (uppercased) without trying to decide whether it's a real realm
> > or not.
> 
> So you'd only ever fall back to default_realm if the host doesn't have a
> FQDN at all?

That's correct.