Re: Proposed F19 Feature: Less Brittle Kerberos

2013-01-31 Thread Stef Walter
On 01/31/2013 10:35 PM, Kurt Seifried wrote: > Can't reply on the wiki page, FAS is throwing a 500 server error when I > try to log in. > > > On Thu, Jan 31, 2013 at 4:47 AM, Jaroslav Reznik > wrote: > > = Features/LessBrittleKerberos = > https://fedoraproject

Re: Proposed F19 Feature: Less Brittle Kerberos

2013-01-31 Thread Stef Walter
On 01/31/2013 07:57 PM, Ken Dreyer wrote: > On Thu, Jan 31, 2013 at 4:47 AM, Jaroslav Reznik wrote: >> Kerberos clients can optionally verify reverse DNS records for services that >> they connect to as a way of trying to identify which realm they belong to. >> However in many cases these do not ex

Re: Proposed F19 Feature: Less Brittle Kerberos

2013-01-31 Thread Kurt Seifried
Can't reply on the wiki page, FAS is throwing a 500 server error when I try to log in. On Thu, Jan 31, 2013 at 4:47 AM, Jaroslav Reznik wrote: > = Features/LessBrittleKerberos = > https://fedoraproject.org/wiki/Features/LessBrittleKerberos > > Feature owner(s): Stef Walter > > Make kerberos in

Re: Proposed F19 Feature: Less Brittle Kerberos

2013-01-31 Thread Ken Dreyer
On Thu, Jan 31, 2013 at 4:47 AM, Jaroslav Reznik wrote: > Kerberos clients can optionally verify reverse DNS records for services that > they connect to as a way of trying to identify which realm they belong to. > However in many cases these do not exist. Kerberos should fall back to it's > defaul

Proposed F19 Feature: Less Brittle Kerberos

2013-01-31 Thread Jaroslav Reznik
= Features/LessBrittleKerberos = https://fedoraproject.org/wiki/Features/LessBrittleKerberos Feature owner(s): Stef Walter Make kerberos in Fedora simpler to use by removing some of the brittleness that are common failure points. In particular we remove the need for kerberos clients to sync th