Re: Solaris 9 + Heimdal KDC?

["Henry B. Hotz" <hotz@jpl.nasa.gov>]

On Feb 16, 2005, at 12:08 PM, Adam Morley wrote:

> On Wed, Feb 16, 2005 at 07:55:26PM +0100, Love wrote:
>> It depend on how the lib resolves the principal name of the host.  
>> There are
>> two issues, first if the machine failes to default to resolve its  
>> name to
>> the FQDN, and second because it get confused of what realm to use.
>
> Ok.  That makes sense.
>
>>
>> The first should be fixable by changing the order in /etc/hosts, the  
>> second
>> by doing what below.
>
> # cat /etc/hosts
> 127.0.0.1       localhost loghost
> 10.2.1.125      win2k0.prod.gmi.com win2k0
>
> I thought that was the "order?"

hostname?  (should return either win2k0 or win2k0.prod.gmi.com)

>>> [domain_realm]
>>>         .gmi.com = GMI.COM
>>
>> You probably want to add add the line below in the [domain_realm]  
>> section.
>>
>>           .prod.gmi.com = GMI.COM
>
> I was under the impression that .gmi.com would encompass .prod.gmi.com  
> also?
> It's been working fine on my test RedHat box.  But then, I'm new to
> Kerberos and Linux != Solaris.

I'll second the question there.  I thought .gmi.com would match  
a.b.gmi.com too.
------------------------------------------------------------------------ 
----
The opinions expressed in this message are mine,
not those of Caltech, JPL, NASA, or the US Government.
Henry.B.Hotz@jpl.nasa.gov, or hbhotz@oxy.edu