[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: A question on realm discovery logic
Zeqing (Fred) Xia wrote:
> Hi All,
> It seems to me that Heimdal tries to find the realm of a given host by
> looking up DNS TXT record of _kerberos. + <host> + .. For example,
> if the host is abc.xyz.com, Heimdal first tries looking for TXT
> record of _kerberos.abc.xyz.com. and then _kerberos.xyz.com.. This
> is in get_host_realm.c. However I cannot find this logic in Kerberos
> RFC 4120, and not in practice either. Is this something extra?
DNS TXT record lookups are not standardized but they are supported in
both Heimdal and MIT Kerberos.