On Wed, Jul 6, 2011 at 10:27 AM, <[email protected]> wrote: > Does anyone on this list intentionally rely on PTR lookups for > Kerberos hostname canonicalization? >
Yes, for "ssh host". In our case, the canonicalization is done by the ssh client itself though, not by the krb5 library. Now that I'm aware of the issue I plan to use KDC aliases instead. Does current MIT support that? ________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos
