Content-Type: text/plain Content-Disposition: inline Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.420 (Entity 5.420) Subject: domain_realm docs need update for referrals X-RT-Original-Encoding: iso-8859-1 Content-Length: 830 This is Debian bug http://bugs.debian.org/482681 The documentation for domain_realm mappings needs an update for referral support. The following stanza in admin.texinfo: | If no translation entry applies, the host's realm is considered to be | the hostname's domain portion converted to upper case. is no longer entirely correct. According to Sam's comments in the Debian bug: First, the realm of a host if no domain_realm entry is found is no longer the uppercase DNS name of the host. Instead it is a special realm that means no realm is available. Most of the code actually treats this vale to mean that the uppercase DNS name should be used. Keytabs however don't. In the keytab case we use the default realm. I think the documentation may also need to mention what happens when the local KDC does support referrals.