What are the issues with dns_lookup_realm ?
Greg Hudson
ghudson at MIT.EDU
Tue Oct 12 13:18:10 EDT 2010
On Tue, 2010-10-12 at 04:36 -0400, Brian Candler wrote:
> On Mon, Oct 11, 2010 at 02:12:24PM -0400, Greg Hudson wrote:
> > No, it's not the domain heuristic, which is off by default anyway; it's
> > the next step after the domain heuristic, which is to use the parent
> > domain (uppercased) without trying to decide whether it's a real realm
> > or not.
>
> So you'd only ever fall back to default_realm if the host doesn't have a
> FQDN at all?
That's correct.
More information about the Kerberos
mailing list