I would like to change our Kerberos DNS SRV records from using an A record to a CNAME record. According to the DNS specs, a SRV record can only point to an A (or AAAA) record.

I did some minimal testing, and the MIT kinit client as well as the Heimdal kinit client had no trouble with CNAME's in the SRV record.

Here is the question:

Has anyone on the list encountered a Kerberos client or library that used DNS discovery that COULDN'T handle an SRV record with a CNAME?

Thanks, Adam Lewenberg

Reply via email to