Re: SPNEGO and MDNS

2008-03-06 Thread Nelson Bolyard
Michael Ströder wrote, On 2008-03-05 15:23: > Michael Ströder wrote: >> If I configure the KDC in /etc/krb5.conf in section [realms] everything >> works fine. But I'd like to let the clients lookup the KDC in DNS SRV >> records. This works fine for the MIT utils like kinit etc. but not for >> Fi

Re: SPNEGO and MDNS

2008-03-05 Thread Michael Ströder
Michael Ströder wrote: > > If I configure the KDC in /etc/krb5.conf in section [realms] everything > works fine. But I'd like to let the clients lookup the KDC in DNS SRV > records. This works fine for the MIT utils like kinit etc. but not for > Firefox and/or Seamonkey. > > Observing the netw

SPNEGO and MDNS

2008-03-05 Thread Michael Ströder
HI! I hope I'm right here with a question regarding SPNEGO-based authentication and locating the Kerberos KDC via DNS. All the DNS zones and forwarding is correctly set up. If I configure the KDC in /etc/krb5.conf in section [realms] everything works fine. But I'd like to let the clients looku