[krbdev.mit.edu #6518] Krb documentation: Mapping Hostnames onto Kerberos Realms and Hostnames for KDCs

[Sharma@krbdev.mit.edu]

I came across some discrepancy in documentation and the krb source code related to hostname for kdc.

The krb documentation mentions that one can create these CNAME records in DNS to locate the KRB KDC.

     kerberos                CNAME     daisy
     kerberos-1              CNAME     use-the-force-luke
     kerberos-2              CNAME     bunny-rabbit

I did not find any api call in krb source code (1.4, 1.5, 1.6 etc.) where anyone is trying to find KDC names using CNAME records.

The default REALM TXT record works fine as well as new SVR records to locate the KDC names.

Can someone please look into the CNAME related krb documentation and source code together whether I missed some thing. I debugged the krb code extensively to locate the code to find KDC names using CNAME records. Anyway the SVR DNS records are better way to program the KDC names.

I will try to create a bug in krb bug tracking system as I could not find a way to do so yet.

SHAMBHULAL SHARMA
Software Engineer
General Atomics
3550 General Atomics Court
San Diego, CA 92121-1122
Off 1-858-455-2557
sam.sharma at gat.com<mailto:sam.sharma at gat.com>