Incremental propagation when KDCs are clients of a different realm

[Toby Blake]

> On 7 Nov 2015, at 00:04, Benjamin Kaduk <kaduk at MIT.EDU> wrote:
> 
[...]

> Did you investigate putting a domain_realm mapping to KDCDOMAIN in the
> alternate krb5.conf during your testing?  I would expect that to allow the
> krb5_sname_to_principal behavior to be changed.

Ach, of course, yes, that does indeed seem to resolve the issue.

Cheers
Toby


-- 
The University of Edinburgh is a charitable body, registered in
Scotland, with registration number SC005336.