On Thu, Dec 8, 2016 at 10:59 AM, Alexander Bokovoy <aboko...@redhat.com>
> It is really simply: your DNS domain named as your Kerberos realm must
> be under your control, one way or another, to allow automatic discovery
> of resources to work.
Thanks, this explanation makes it crystal clear. This exact phrasing would
have made the docs much clearer too, IMO.
Setting the realm to the DNS domain that the FreeIPA internal DNS server
serves is just one simple out-of-the box way to get DNS domain named as
your Kerberos realm that is under your control, in other words.
Lautus Solutions (Pty) Ltd
Building 27, The Woodlands, 20 Woodlands Drive, Woodmead, Gauteng
Manage your subscription for the Freeipa-users mailing list:
Go to http://freeipa.org for more info on the project