[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [PATCH] Should we avoid DNS for short names?

>> Other than that I don't see any problems. :-)
>> Wouldn't this be a problem only if you have a non-dns based realm AND
>> you also don't have any local configuration for it (or if the KDC is
>> down)?
> It's more about misconfiguration, and our users (or indeed my code)
> blurring the distinction between a netbios domain and a realm.
> Attached is another patch to avoid doing a DNS lookup on _kerberos.host
> where 'host' is unqualified.  This was going to the root DNS servers.

What codepaths are causing this to happen for you ?


PGP signature