[27570] in Kerberos
Re: Reading kerberos-adm from DNS: when will MIT-krb support this?
daemon@ATHENA.MIT.EDU (Ken Raeburn)
Mon Mar 12 23:04:08 2007
In-Reply-To: <200703130225.VAA13178@quince.ifs.umich.edu>
Mime-Version: 1.0 (Apple Message framework v752.2)
Message-Id: <8A77CD2E-4AF9-45A4-B32D-0B9B2A0F7FA3@MIT.EDU>
From: Ken Raeburn <raeburn@mit.edu>
Date: Mon, 12 Mar 2007 23:02:56 -0400
To: Marcus Watts <mdw@umich.edu>
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On Mar 12, 2007, at 22:25, Marcus Watts wrote:
> Looks like it should be possible to use
> krb5int_locate_server(?, ?, ?, locate_service_kadmin, SOCK_STREAM,
> AF_INET);
> (or, as you say, equivalent IPv6 logic,) presumably followed by
> some sort
> of loop based on whatever comes back in addrlist, looping to connect,
> and returning the first connection that also succeeds with
> clnttcp_create,
> plus some sort of application hook for "kadmin -s host:port" to
> override the behavior of krb5int_locate_server.
Yes, it should. That would also fix up the lack of fallback
capability for multi-master setups (e.g., using the LDAP back end,
and multiple kadmind servers running).
> IPv6 support raises the question of an IPv6 portmapper, even though
> your
> code doesn't actually need this...
There's also the pesky little matter of having exposed in installed
header files the data structures that need to be modified for IPv6. :-(
Ken
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
