[25006] in Kerberos
Re: Possible to use only IP addresses in MIT Kerberos (ie: disable
daemon@ATHENA.MIT.EDU (Jeremy Hunt)
Mon Nov 28 18:51:00 2005
Message-Id: <13592751.1133130477273.JavaMail.root@optim1>
Date: Mon, 28 Nov 2005 09:27:52 +1100
From: Jeremy Hunt <jeremyh@optimation.com.au>
Mime-Version: 1.0
To: kerberos@mit.edu
In-Reply-To: <25553167.1132967099158.JavaMail.root@optim1>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Including the following entry in the libdefaults section of krb5.conf
dns_lookup_kdc = false
will probably work.
and if you don't want dns for the realm either, then add the following
entry as well:
dns_lookup_realm = false
See /krb5/man/man5/krb5.conf.5 for details.
rchowneltura@hotmail.com wrote:
> [safeTgram (optim1) receive status: NOT encrypted, NOT signed.]
>
>
> Hi, I am investigating kerberizing of our application using
> MIT Kerberos5. Due to the nature of our application,
> we cannot use DNS and must use host IP addresses
> instead of hostnames during authentication.
>
> However (I'm a Kerberos newbie), there doesn't seem
> to be a way to disable name resolution. For example,
> I can't specify IP addresses for the KDC/kadmind
> host in krb5.conf, it doesn't seem to work.
>
> Has anybody had success in configuring only IP addresses
> in MIT Kerberos5, or perhaps give me any tips?
>
> Thanks, Richard
>
> ________________________________________________
> Kerberos mailing list Kerberos@mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
>
>
>
>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
