clarify meaning of dns_lookup_kdc?

Greg Hudson ghudson at mit.edu
Fri Nov 8 18:28:29 EST 2019


On 11/8/19 2:58 PM, Jerry Shipman wrote:
> Hello,
> Can you clarify for me exactly what dns_lookup_kdc does?

dns_lookup_kdc=false in [libdefaults] should suppress all SRV lookups by
libkrb5 for realm KDCs, whether or not there is a [realms] section for
the realm.

In your scenario, it's possible that a locate plugin module is taking
care of the lookup.  This explanation is more likely if the system is
running sssd.


More information about the Kerberos mailing list