Proper ordering of mapping entries in [domain_realms] section of	krb5.conf
    Todd Grayson 
    tgrayson at cloudera.com
       
    Tue Dec  9 00:32:09 EST 2014
    
    
  
What is the proper order for the [domain_realms] section of the krb5.conf
with regard to rules being applied when there are mixed dns FQDN, domain
names and REALMS.
Should the [domain_realms] section be listed from most specific to least
specific
for example
[domain_realm]
specific-host.domain.name = REALM.NAME
domain.name = OTHER.REALM.NAME
.domain.name = OTHER.REALM.NAME
or is it least specific to most specific?
[domain_realm]
domain.name = OTHER.REALM.NAME
.domain.name = OTHER.REALM.NAME
specific-host.domain.name = REALM.NAME
Thanks in advance!
-- 
Todd Grayson
Customer Operations Engineering
    
    
More information about the Kerberos
mailing list