It seems to be a bit more complicated.
SEAM doc says to use FQDN when creating service or host principals.
That is what I did. However we use NIS with short names.
I configured our NFS servers to use krb5 authentification.
When mounting a shared directory (nfsserv:/path for exemple), a SEAM client asks a ticket for the nfs/nfsserv.domainname principal (sorry if I use wrong terminology, I'm always a Kerberos beginner). So it seems that the SEAM implementation includes a workaround to convert short names into FQDN names...
Yes, the Kerberos libraries will try to convert the short name to a fqdn names by doing DNS lookups. If it succeeds, it will use the fqdn form of the name.
BTW - this question is not really appropriate for 'krbdev', I'm moving it over to the more general "[EMAIL PROTECTED]" list.
-wyllys
________________________________________________ Kerberos mailing list [EMAIL PROTECTED] https://mailman.mit.edu/mailman/listinfo/kerberos
