Jeffrey Hutzelman <[EMAIL PROTECTED]> writes: > much you tell them. However, you asked for advice, and Russ operates > what as far as I know is the largest and longest-lived example of a > realm that has deviated from convention in this way. I'd listen to > him if I were you.
Okay, sounds good. Thanks, Russ; I'm pretty lucky to be able to learn from your experiences. This is the sort of thing that I would've blindly plunged into (in the name of elegance) without your advice. So, to summarize, I guess the basic problem is that a lot of "applications" (ie things that use libkrb, such as AFS) assume that to get the realm of a host, you take its hostname, truncate some leading portion, and capitalize what's left. Instead of this, those apps ought to be letting libkrb figure this out (which it will do using DNS entries, thereby using the capitalization of the DNS TXT record, which can be assumed to be correct). But there are too many apps out there that don't do this, so it's going to be painful to break this assumption anytime in the forseeable future. Does that sound right? - a -- PGP/GPG: 5C9F F366 C9CF 2145 E770 B1B8 EFB1 462D A146 C380 _______________________________________________ OpenAFS-info mailing list [email protected] https://lists.openafs.org/mailman/listinfo/openafs-info
