host-based princname canon (Re: Null realms and servers)

Ken Raeburn raeburn at MIT.EDU
Wed Dec 20 15:26:49 EST 2006


On Dec 20, 2006, at 13:04, Nicolas Williams wrote:
> An algorithm for hostname canonicalization in krb5_get_credentials()
> with search lists but w/o DNS:
>
>     for (domain in searchlist) {
> 	if (get_svc_ticket(fqdn = short_form_hostname || '.' || domain))
> 	    return (fqdn);
>     }
>
>     return (short_form_hostname || '.' || searchlist[0]);

So if the name exists in multiple domains in the search list, the  
result here depends on whether the service in question is available  
on any of those hosts.  Or do you want to try something common like  
"host" for hostname resolution, and then go back and try to get the  
service ticket?

Ken



More information about the krbdev mailing list