Hi folks,

My Kerberos server includes four kadmin/... principals:

   kadmin/[email protected]
   kadmin/[email protected]
   kadmin/[email protected]
   kadmin/[email protected]

In this case, munchkin was the name of my current server when I first 
installed it. Soon after it was renamed when it replaced an older server. 

At first I thought that the kadmin/<host> entry was necessary to allow 
the localhost to run kadmind. However, more than two years later it is 
still the only kadmin/<host> principal and my Kerberos server (incl. 
kadmind) has continued to function properly despite this mismatch. 
Moreover, the DNS entry for munchkin was deleted soon after the old 
server was replaced.

What are the disadvantages in this situation? Also, if I plan to 
occasionally move the master Kerberos server to another host, can I 
create multiple kadmin/<host> principals without causing any problems?

Thanks,

Jaap

________________________________________________
Kerberos mailing list           [email protected]
https://mailman.mit.edu/mailman/listinfo/kerberos

Reply via email to