Russ Allbery wrote:

[dd]

> If you add an explicit domain_realm mapping for each IP address to the
> [domain_realm] section of your krb5.conf file, it will probably work, but
> it's generally a much better idea to use real host names (possibly in some
> private domain ending in .local or some similar marker).

I see. Do I need a real DNS or perhaps /etc/hosts will do? I share
/etc/hosts as a NIS map.

And another question. If a Kerberos-enabled server has several
principals in its keytab, how exactly does it decide which one to
use?


-- 
Victor Sudakov,  VAS4-RIPE, VAS47-RIPN
2:5005/4...@fidonet http://vas.tomsk.ru/
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

Reply via email to