Each Realm must have it's own KDC?

[Austin Gonyou]

Thanks much. I would seem as that as well, but I don't know of any
documentation on the subject. As I said, I read the docs provided,
unless I'm missing some pages the implementation of such a thing seems
spartan. 

I'm going to take sunday and see what I can get out of it as well as
re-reading all docs. As part of this, should I have to create multiple
DB's to accomplish this? If you know? (i.e. kdb5_util create -s -r
SOMEOTHERREALM.ORG -d
/var/kerberos/krb5kdc/principal.SOMEOTHERREALM.ORG)

If not, thanks anyway!



On Thu, 2002-03-21 at 16:06, Derek Atkins wrote:
> Each realm needs to have its own logical KDC, but I believe you can
> run one "krb5kdc" process that serves multiple realms.  Note that this
> is implementation dependent.  The protocol doesn't really care, but an
> implementation may (or may not) limit you.
> 
> -derek
> 
> Austin Gonyou <austin at coremetrics.com> writes:
> 
> > After reading through the KRB5 installation and administration
> manuals,
> > it seems to me that each kerberos realm must have it's own KDC. Is
> that
> > in fact so, or is there a way to have multiple realms served my the
> same
> > KDC. 
> > 
> > We're facing some pretty crazy DNS changes soon, and it would affect
> the
> > kerberos rollout plan rather directly. TIA.
> > 
> > 
> > -- 
> > Austin Gonyou
> > Systems Architect, CCNA
> > Coremetrics, Inc.
> > Phone: 512-698-7250
> > email: austin at coremetrics.com
> > 
> > "It is the part of a good shepherd to shear his flock, not to skin
> it."
> > Latin Proverb
> > _______________________________________________
> > krbdev mailing list             krbdev at mit.edu
> > http://mailman.mit.edu/mailman/listinfo/krbdev
> 
> -- 
>        Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
>        Member, MIT Student Information Processing Board  (SIPB)
>        URL: http://web.mit.edu/warlord/    PP-ASEL-IA     N1NWH
>        warlord at MIT.EDU                        PGP key available
-- 
Austin Gonyou
Systems Architect, CCNA
Coremetrics, Inc.
Phone: 512-698-7250
email: austin at coremetrics.com

"It is the part of a good shepherd to shear his flock, not to skin it."
Latin Proverb