It is my understanding that version 1.3.1 of MIT gss_import_name 
canonicalizes host names using DNS. Does the latest version of MIT GSSAPI 
canonicalize host names? Is it possible to configure this behavior?

Microsoft supports the KDC option NAME_CANONICALIZE (15) -- see 
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/TechRef/4a1daa3e-b45c-44ea-a0b6-fe8910f92f28.mspx.
 
Does this mean host name canonicalization on the KDC? Does MIT support KDC 
option 15?

Thanks.

Frank
________________________________________________
Kerberos mailing list           [email protected]
https://mailman.mit.edu/mailman/listinfo/kerberos

Reply via email to