[32634] in Kerberos

home help back first fref pref prev next nref lref last post

Re: Multi Realm Question

daemon@ATHENA.MIT.EDU (Greg Hudson)
Fri Sep 3 16:40:30 2010

From: Greg Hudson <ghudson@mit.edu>
To: Tom Parker <tparker@cbnco.com>
In-Reply-To: <4C814E4A.6010708@cbnco.com>
Date: Fri, 03 Sep 2010 16:40:26 -0400
Message-ID: <1283546426.5992.1154.camel@ray>
Mime-Version: 1.0
Cc: "kerberos@mit.edu" <kerberos@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

On Fri, 2010-09-03 at 15:36 -0400, Tom Parker wrote:
> My question therefor is:  Is there a way to run a single KDC with two 
> realms, One as master for XX.EXAMPLE.COM and one as slave for 
> EXAMPLE.COM?  And if not, how would you solve this?

It is possible for a single MIT krb5 KDC process to serve multiple
realms, so this should in theory be possible.

However, I don't think I fully understand your requirements.  Why is it
necessary for the EXAMPLE.COM slave to be the same KDC as the
XX.EXAMPLE.COM master?


________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post