On Wed, Aug 17, 2005 at 11:51:08AM -0700, Donn Cave wrote:
> That's weird, but there are some potential surprises. For an
> example I ran into myself, if your initial request fails, it
> will be retried to the configured "master_kdc". Of course if that
> isn't in krb5.conf it will go to DNS ("_kerberos-master._udp".)
>
> "master_kdc" is fairly recent and likely not configured at a
> lot of sites where the krb5.conf goes back a ways (or maybe
> where there is no master KDC, though such sites may as well
> configure a value anyway.)
Interesting. We do not in fact have a "master_kdc" specified
in our config files as they date back almost 7 years at this point. I
will have to add that to our configs.
--
Chet Burgess
Manager, Enterprise Collaboration Services
Information Services Division
University of Southern California
[EMAIL PROTECTED]
213-740-5160
pgpyfdhPE1SzR.pgp
Description: PGP signature
________________________________________________ Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos
