On 1/11/2019 11:35 AM, Adam Lewenberg wrote: > I would like to change our Kerberos DNS SRV records from using an A > record to a CNAME record. According to the DNS specs, a SRV record can > only point to an A (or AAAA) record.
That is correct. Pointing an SRV entry to a CNAME will lead to unpredictable behavior depending upon the implementation of both the DNS client and the server. I strongly recommend against doing so. Jeffrey Altman
smime.p7s
Description: S/MIME Cryptographic Signature
