[14566] in Kerberos
Re: Solaris 8 and libresolv
daemon@ATHENA.MIT.EDU (Casper H.S. Dik - Network Security)
Tue Jun 12 21:56:18 2001
From: Casper.Dik@Holland.Sun.Com (Casper H.S. Dik - Network Security Engineer)
Date: 12 Jun 2001 08:57:40 GMT
Message-ID: <9g4li4$qhe$1@new-usenet.uk.sun.com>
To: kerberos@MIT.EDU
[[ PLEASE DON'T SEND ME EMAIL COPIES OF POSTINGS ]]
flaminio <Livio.Flaminio@agat.univ-lille1.fr> writes:
> Do you mean that /etc/hosts (or NIS/NIS+ tables ) should look like
>XXX.YYY.ZZZ.WWW MyHost.MyDNSdomain MyHost
>instead of
>XXX.YYY.ZZZ.WWW MyHost
Yes. That makes the host system consistent (DNS enforces FQDNs, the rest
doesn't and should be made to follow DNS)
>(plus, naturally, appropriate /etc/defaultdomain and./etc/ethers for boot clients
>...) ?
You don't need to change defaultdomain which is supposed to be the
RPC domain only.
For some tables, bootparams changes may also be necessary. Not sure
about ethers; ethers usually is used to mapped address to names not the
other way around (for clients booting)
>In particular it's very annoying that in with the above /etc/hosts /bin/
>hostname returns the FQhostname.
Not so; there's no need to change:
/etc/nodename
/etc/hostname*.*
so the "nodename" can still be "foo" even though /etc/hosts has
"A.B.C.D foo.bar.baz.com foo"
>but the libraries ? where is libkrb5.so ? I need the kerberos libraries to
>compile kerberised applications
>(sasl, postgresql, openldap, horde, imp, ) . I would be very happy to be
>mistaken
>but it doesn't seem to me that the Sun supported version of Kerberos has all the
>libraries that are needed
Hm, I can't find those either; we seem to have removed libkrb.so (K IV) from
Solaris 8 but I can't seem to find the Kerberos V development stuff.
Casper
--
Expressed in this posting are my opinions. They are in no way related
to opinions held by my employer, Sun Microsystems.
Statements on Sun products included here are not gospel and may
be fiction rather than truth.