[19426] in Kerberos_V5_Development
Re: Kerberos transport DNS record design
daemon@ATHENA.MIT.EDU (Matt Rogers)
Wed Jun 1 10:49:17 2016
Date: Wed, 1 Jun 2016 10:49:04 -0400
From: Matt Rogers <mrogers@redhat.com>
To: Greg Hudson <ghudson@mit.edu>
Message-ID: <20160601144903.GB20014@mail.redhat.com>
MIME-Version: 1.0
Content-Disposition: inline
In-Reply-To: <574DF202.502@mit.edu>
Cc: krbdev@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
On 05/31, Greg Hudson wrote:
> On 05/31/2016 03:13 PM, Nathaniel McCallum wrote:
> > _kerberos-adm.REALM
> > _kerberos.REALM
> > _kpasswd.REALM
>
> _kerberos.REALM TXT is currently used to look up the realm of a hostname
> (see lib/krb5/os/hostrealm_dns.c), so we should use a different prefix
> label, like _krb5kdc or _kdc.
>
> I have no other objections.
The wiki page should be up to speed now. I added some additional notes
about priority and fallback behavior that were discussed in IRC. A
quick review would be appreciated.
https://k5wiki.kerberos.org/wiki/Projects/KDC_Discovery
--
Matt Rogers
Red Hat, Inc
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
