"The [domain_realm] section provides a translation from a domain name or hostname to a Kerberos realm name" ^^^^^^^^
from: http://web.mit.edu/kerberos/krb5-1.4/krb5-1.4.2/doc/krb5-admin/domain_realm. html#domain_realm You may have add the individual hostnames. Or add more DNS subdomains and rename your hosts to distinguish between the realms, you imply it is a "test.domain" [Rinat] Thank you. 1 case will make krb5.conf thouthands lines long. 2 case is not a good idea for existing DNS infrastructure (actually not only DNS infrastructure will be impacted) + adds more TCO to it. I was wondering if there is way to have this type of record in [domain_realm] section? .test.domain.com = WINDOWS.ROOT.REALM ; CHILD1.WINDOWS.ROOT.REALM ; CHILD2.WINDOWS.ROOT.REALM ________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos
