Re: Question about using Kerberos with AFS

[Ken Hornstein]

>> Also, does the Kerberos realm have to match the DNS domain name of the
>> machines in the realm?
>
>No.  The realm is specified in a config file on the client.  Current
>thinking here is don't even bother making it match the DNS domain.
>That way when the burrowcrats rename your organization and decide you
>have to change the domain name to match, you won't be compelled to
>change the realm name, too.

Puh-LEASE be careful when you say this.  The _only_ person I ever knew
who ran a V5 realm with AFS that didn't match his domain name regretted
it for a long time.  I heard him say over and over, "If I had known all
the problems it caused, I would have never done it".

--Ken