[29184] in Kerberos
Windows not using SRV rr's to locate KDCs
daemon@ATHENA.MIT.EDU (Richard E. Silverman)
Sat Feb 2 21:00:23 2008
From: "Richard E. Silverman" <res@qoxp.net>
Date: Sat, 02 Feb 2008 20:59:24 -0500
Message-ID: <m2myqiu7er.fsf@darwin.oankali.net>
MIME-Version: 1.0
X-Complaints-To: abuse@speakeasy.net
X-DMCA-Complaints-To: abuse@speakeasy.net
To: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
I have an AD realm, FOO.COM, and an MIT realm, UNIX.FOO.COM, with two-way
trust between them. I am using kerberized services on hosts in the UNIX
realm from Windows XP clients. If I explicitly list KDCs with ksetup
thus:
> ksetup /addkdc UNIX.FOO.COM kdc.unix.foo.com
... it works. However, the ksetup documentation says that if I omit the
KDC:
> ksetup /addkdc UNIX.FOO.COM
... Windows should use SRV records to locate the KDCs. It's not doing
that. I have snooped network traffic on the client; it is not doing any
DNS lookups for SRV records at all.
Any help?
Thanks,
--
Richard Silverman
res@qoxp.net
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
