DNS SRV RRs and priority

Greg Hudson ghudson at MIT.EDU
Fri Jun 1 00:45:14 EDT 2012


On 05/31/2012 09:33 PM, Jaap Winius wrote:
> One of the sites I maintain uses DNS SRV resource records to allow  
> Debian squeeze workstations to discover three MIT Kerberos key  
> servers. Like with all SRV records, it's possible to alter the  
> priority value, but my question is, does this ever make a difference?

We do sort SRV responses by priority (but we ignore weights).

> So I tried an experiment: use three SRV records, but give the one for  
> the local KDC the highest priority. Unfortunately, this way the system  
> behaves just like in the first situation. So, now I'm back to using  
> one SRV RR per location.

My only guess is that you have the sense of SRV priorities backwards?
Per RFC 2782, we prefer records with lower-numbered priority fields over
records with higher-number priority fields.


More information about the Kerberos mailing list