Package: krb5-admin-server
Version: 1.6.dfsg.4~beta1-5lenny2
Severity: normal
The kadmind(8) man page explicitly says that multiple realms are supported by
a single kadmind:
-r realm
specifies the default realm that kadmind will serve; if it is not
specified, the default realm of the host is used. kadmind will
answer requests
for any realm that exists in the local KDC database and for
which the
appropriate principals are in its keytab.
However, the reality seems to be that the current kadmind no longer supports
multiple realms and multiple instances of the daemon have to be used instead.
In combination with poor error reporting in the whole Kerberos suite, this is
a deadly trap :)
Please fix the documentation to say that an instance of kadmind per realm is
needed.
-- System Information:
Debian Release: 5.0.3
APT prefers stable
APT policy: (500, 'stable')
Architecture: i386 (x86_64)
Kernel: Linux 2.6.26-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=C, LC_CTYPE=cs_CZ (charmap=ISO-8859-2)
Shell: /bin/sh linked to /bin/bash
Versions of packages krb5-admin-server depends on:
ii debconf [debcon 1.5.24 Debian configuration management sy
ii krb5-kdc 1.6.dfsg.4~beta1-5lenny2 MIT Kerberos key server (KDC)
ii libc6 2.7-18 GNU C Library: Shared libraries
ii libcomerr2 1.41.3-1 common error description library
ii libkadm55 1.6.dfsg.4~beta1-5lenny2 MIT Kerberos administration runtim
ii libkeyutils1 1.2-9 Linux Key Management Utilities (li
ii libkrb53 1.6.dfsg.4~beta1-5lenny2 MIT Kerberos runtime libraries
ii libss2 1.41.3-1 command-line interface parsing lib
ii lsb-base 3.2-20 Linux Standard Base 3.2 init scrip
krb5-admin-server recommends no packages.
krb5-admin-server suggests no packages.
-- debconf information:
krb5-admin-server/kadmind: true
* krb5-admin-server/newrealm:
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
