Kerberos transport DNS record design

Matt Rogers mrogers at
Wed Jun 1 10:49:04 EDT 2016

On 05/31, Greg Hudson wrote:
> On 05/31/2016 03:13 PM, Nathaniel McCallum wrote:
> >     _kerberos-adm.REALM
> >     _kerberos.REALM
> >     _kpasswd.REALM
> _kerberos.REALM TXT is currently used to look up the realm of a hostname
> (see lib/krb5/os/hostrealm_dns.c), so we should use a different prefix
> label, like _krb5kdc or _kdc.
> I have no other objections.

The wiki page should be up to speed now. I added some additional notes
about priority and fallback behavior that were discussed in IRC. A
quick review would be appreciated.

Matt Rogers
Red Hat, Inc

More information about the krbdev mailing list