[19529] in Kerberos_V5_Development

home help back first fref pref prev next nref lref last post

Implicit REALM/DNS Mapping

daemon@ATHENA.MIT.EDU (Nathaniel McCallum)
Tue Jan 31 05:36:41 2017

MIME-Version: 1.0
From: Nathaniel McCallum <npmccallum@redhat.com>
Date: Tue, 31 Jan 2017 11:36:29 +0100
Message-ID: <CAOASepOm1EaGqH3SxX7guReb+bkdgxjK9yz_7LXK8PEWWtGrfw@mail.gmail.com>
To: krbdev <krbdev@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu

Currently, GSSAPI will select a non-default ccache if a realm/domain
mapping exists in krb5.conf. However, this doesn't work if the KDC was
found via discovery. Does MIT have any thoughts about implying an
implicit mapping in this case?

Nathaniel
_______________________________________________
krbdev mailing list             krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev

home help back first fref pref prev next nref lref last post