[6926] in Kerberos
Re: Question about krb.realms file
daemon@ATHENA.MIT.EDU (Derrick J. Brashear)
Fri Mar 22 13:21:48 1996
To: kerberos@MIT.EDU
Date: Fri, 22 Mar 1996 10:40:16 -0500
From: "Derrick J. Brashear" <shadow+@andrew.cmu.edu>
Excerpts from netnews.comp.protocols.kerberos: 22-Mar-96 Question about
krb.realms file by Wes Brown@prozac.student
> Say I want to connect to foo.bar.com in domain CAZ.BAR.COM and use
You mean realm CAZ.BAR.COM, right?
> server kerberos.bar.com. kerberos.bar.com is the main kerberos server
> for the bar.com network. But, I also want to connect to baz.bar.com and
> use server krb.chips.bar.com. My krb.realms file would look like:
>
> .bar.com CAZ.BAR.COM
> baz.bar.com DOZ.BAR.COM
>
> Or would it need to be:
> baz.bar.com DOZ.BAR.COM
> .bar.com CAZ.BAR.COM
Presumably the second; At least one implementation of Kerberos uses the
first match, and they may all do it that way. To be honest after getting
bit once, I haven't bothered to try to find out.
-D
