On Wed, 2011-07-06 at 20:08 -0400, Frank Cusack wrote:

> Yes, for "ssh host".  In our case, the canonicalization is done by the
> ssh client itself though, not by the krb5 library.  Now that I'm aware
> of the issue I plan to use KDC aliases instead.  Does current MIT
> support that?

In MIT krb5, it's supported in the LDAP KDB back end, but not in the BDB
one at this time.



________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

Reply via email to