Oh. Yeah... Good point. 

Microsoft pretty much forces your DNS name to match the realm name, among
other things.

-- Nathan

> -----Original Message-----
> From: Ken Hornstein [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, January 03, 2001 10:38 AM
> To: [EMAIL PROTECTED]
> Subject: Re: Question about using Kerberos with AFS 
> 
> 
> >> >Is anyone out there using those TXT records for 
> _kerberos.domain.name to
> >> >specify their realm name?  Considering that BIND8 now 
> dislikes hostnames
> >> >with underscores in them, not quite sure how well this will work.?
> >> 
> >> Note that I'm one of the authors for that specification :-/
> >> 
> >> "Yes", but it doesn't solve all your problems.  And they 
> work quite fine
> >> with any recent version of BIND (they're not hostnames).
> >
> >Yep, they work just fine. Plus, we're going to see a LOT 
> more of them as
> >more sites start using MS Active Directory, as it uses them.
> 
> Note - MS Kerberos uses the SRV records, but it does _NOT_ use the TXT
> records for realm name specification.
> 
> --Ken
> 

Reply via email to