Incremental propagation when KDCs are clients of a different realm
Greg Hudson
ghudson at mit.edu
Mon Nov 2 10:48:35 EST 2015
On 11/02/2015 09:48 AM, Toby Blake wrote:
> I'm trying to set up incremental propagation on a master-slave KDC
> configuration where the KDCs are clients of a different realm to the one they
> serve.
kpropd appears to insist on using the default realm for its iprop code,
even if a "-r realm" parameter is given. This is probably a bug.
As a workaround, you could set KRB5_CONFIG to point to a copy of
krb5.conf file with default_realm changed to the KDC realm.
More information about the Kerberos
mailing list