search for: rfc4120

...mmending to not use subdomains), so, > as far as Samba is concerned, the REALM is the dns domain in > uppercase. > > Again, just trying to understand. Here this is a bit what stefan Kania was doing with the subdomains. https://tools.ietf.org/html/rfc6806.html https://www.ietf.org/rfc/rfc4120.txt If im correct page 97-98 Chap : 7.2.3.1. ( quick search for you ) Greetz, Louis

Dear all, (apologoies - this has nothing to do with 4.7 being out, but is rather a long-standing issue that regularly bites us). Is there anything I could do to further the case of https://bugzilla.mindrot.org/show_bug.cgi?id=1008 As a summary, GSSAPI auth against machine in a DNS load-balanced server farm fails. SSH-1 Kerberos works. DNS load-balanced farm: Individual machines in the farm

(@Rowland) > Whilst it is quite correct to say that the REALM isn't the same as a > DNS domain, there is a correlation between them. The REALM must be the > DNS domain in uppercase, so this: > > SAMBA_PRINCIPAL=dehydrated-service at YOUR.DOMAIN No, you can have your.primayDNSdomain.tld and have REALM = SOMEREALM.TLD Its not obligated to have REALM the same as the DnsDomain.