Re: krb4 confusion serving multiple domains

[joda@pdc.kth.se (Johan Danielsson)]

Len Burns <lenb@sasquatch.com> writes:

> What I am unclear on, is what I need in my krb5.conf file on my kdc
> so that host/www.bla.com is found when authenticating from
> www.bla.com and host/www.bla2.com is selected when authenticating
> from www.bla2.com.

In theory you do something like this:

[realms]
        THE.REALM = {
                v4_domains = bla.com bla2.com
        }

But this only works when the first component is unique, since the v4
request only contains that part part. I don't have any good ideas on
how to add more hints to the kdc, suggestions are welcome.

/Johan