Displaying 2 results from an estimated 2 matches for "tgsreq".
Did you mean:
tgs_req
2009 Dec 10
1
dns lookups for SRV kerberos
...with kdc = adserver1.example.dom.:88 )
To be precise, the following happens (We don't have these records in the DNS
system) :
ASREQ ->
<- KRBERR PREAUTH
DNS SRV _kerberos-master ->
<- no such name
ASREQ ->
<- AS REP OK
DNS SRV _kerberos-master ->
<- no such name
TGSREQ ->
<- TGSREP
DNS SRV _kerberos-master ->
<- no such name
that makes 3 DNS lookups per TGS.
As I have excplicitly configured :
A) dns_lookups to false
B) numerical IP addresses for the KDC's
I would expect dns lookups to be completely *non-existant*.
Are my expectations correct,...
2009 Dec 22
0
Re :Re: dns lookups for SRV kerberos
...the
> DNS
> > system) :
> >
> > ASREQ ->
> > ?<- KRBERR PREAUTH
> > DNS SRV _kerberos-master ->
> > ?<- no such name
> > ASREQ ->
> > ?<- AS REP OK
> > DNS SRV _kerberos-master ->
> > ?<- no such name
> > TGSREQ ->
> > ?<- TGSREP
> > DNS SRV _kerberos-master ->
> > ?<- no such name
> >
> > that makes 3 DNS lookups per TGS.
> >
> > As I have excplicitly configured :
> > A) dns_lookups to false
> > B) numerical IP addresses for the KDC's
&...