Skip Menu |

Subject: domain_realm docs need update for referrals
This is Debian bug

The documentation for domain_realm mappings needs an update for referral
support. The following stanza in admin.texinfo:

| If no translation entry applies, the host's realm is considered to be
| the hostname's domain portion converted to upper case.

is no longer entirely correct.

According to Sam's comments in the Debian bug:

First, the realm of a host if no domain_realm entry is found is no
longer the uppercase DNS name of the host. Instead it is a special
realm that means no realm is available. Most of the code actually
treats this vale to mean that the uppercase DNS name should be used.
Keytabs however don't. In the keytab case we use the default realm.

I think the documentation may also need to mention what happens when the
local KDC does support referrals.