Greg Hudson wrote: [dd]
> > But earlier you said that DNS-canonicalization of the gethostname() is > > used. If we have no DNS, who will canonicalize the hostname? > That's shorthand because so many installations use DNS for hostname > resolution. Heimdal uses getaddrinfo() for its canonicalization step, > and falls back to the raw hostname if that fails. I have been able to successfully authenticate (OpenSSH, gssapi-with-mic) to a host not present in the DNS, only in the "hosts" NIS map. It works!! :) -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN 2:5005/4...@fidonet http://vas.tomsk.ru/ ________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos
