>>>>> "Harald" == Harald Dunkel <[email protected]> writes:
Harald> On 04/06/10 18:07, Sam Hartman wrote:
>> I'll admit I'd rather fix libkadm5clnt to go look in DNS itself.
>> Meanwhile, though I'd be happy doing this is krb5-config provided
>> that we find some reasonably authorative source that
>> _kerberos-adm is the label people actually use in DNS for this.
Harald> Since DNS is not protected by Kerberos, there might be some
Harald> security concerns against looking up the admin host via
Harald> DNS. Maybe a one-time dialog at install time to add the
Harald> admin host to /etc/krb5.conf is a less risky option?
There is no security concern.
--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]
