patch: KDC default referral feature

Richard Silverman res at qoxp.net
Wed Jan 23 15:18:34 EST 2013


On Wed, 23 Jan 2013, Greg Hudson wrote:

> On 01/21/2013 07:28 PM, Richard Silverman wrote:
>> Any further thoughts on this issue?
>
> While I'd like to have better solutions for the problem of multiple
> Kerberos realms for a domain, this particular solution (optimistic
> referrals and a do-not-refer-crossrealm-requests flag) doesn't feel
> elegant or complete to me.

It is, however, practical and completely solves our problem, and our
situation is not I imagine unique.

In any event, thanks for the consideration.

-- 
   Richard


More information about the krbdev mailing list