Kerberos transport DNS record design

Greg Hudson ghudson at mit.edu
Tue May 31 16:20:18 EDT 2016


On 05/31/2016 03:13 PM, Nathaniel McCallum wrote:
>     _kerberos-adm.REALM
>     _kerberos.REALM
>     _kpasswd.REALM

_kerberos.REALM TXT is currently used to look up the realm of a hostname
(see lib/krb5/os/hostrealm_dns.c), so we should use a different prefix
label, like _krb5kdc or _kdc.

I have no other objections.


More information about the krbdev mailing list