[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: krb4 confusion serving multiple domains

Len Burns <lenb@sasquatch.com> writes:

> What I am unclear on, is what I need in my krb5.conf file on my kdc
> so that host/www.bla.com is found when authenticating from
> www.bla.com and host/www.bla2.com is selected when authenticating
> from www.bla2.com.

In theory you do something like this:

        THE.REALM = {
                v4_domains = bla.com bla2.com

But this only works when the first component is unique, since the v4
request only contains that part part. I don't have any good ideas on
how to add more hints to the kdc, suggestions are welcome.