krb5

Earl Killian kerberos at lists.killian.com
Wed Oct 18 11:27:43 EDT 2017


Thank you. Here are the things you requested plus a few more:

% hostname
alpha
% hostname -f
alpha.sub.killian.com
% sed -n -e '/^[^#]/p' /etc/hosts
127.0.0.1	localhost
::1             localhost ipv6-localhost ipv6-loopback
fe00::0         ipv6-localnet
ff00::0         ipv6-mcastprefix
ff02::1         ipv6-allnodes
ff02::2         ipv6-allrouters
ff02::3         ipv6-allhosts
% dig +nocmd +noadditional +noauthority -x 192.168.1.5 | sed -n -e '/^[^;]/p'
5.1.168.192.IN-ADDR.ARPA. 28800 IN	PTR	alpha.sub.killian.com.
% sed -n -e '/^[^#]/p' /etc/host.conf
order hosts, bind
multi on
% sed -n -e '/^[^#]/p' /etc/nsswitch.conf
passwd: compat
group:  compat
hosts:  	files mdns_minimal [NOTFOUND=return] dns
networks:	files dns
services:	files
protocols:	files
rpc:		files
ethers:		files
netmasks:	files
netgroup:	files nis
publickey:	files
bootparams:	files
automount:	files nis
aliases:	files


On 10/17/17 16:44, Benjamin Kaduk wrote:
> On Tue, Oct 17, 2017 at 03:04:20PM -0700, Earl Killian wrote:
>> So obviously I removed the two new "security" lines from my krb5.conf to
>> restore things to a working situation. However, I would like to inquire
>> of the mailing list how things are supposed to work when those are set
>> to false as in the openSUSE distro.
> Most likely, your system is configured such that (some things) think that
> the local hostname is just "alpha", not the fully-qualified form.
> So, the output of `hostname` and `hostname -f` are interesting, as is
> the contents of /etc/hosts.
>
> -Ben





More information about the Kerberos mailing list