]> git.ipfire.org Git - thirdparty/krb5.git/commit
Support site-local KDC discovery via DNS 1183/head
authorNicolas Williams <nico@cryptonector.com>
Thu, 13 May 2021 05:43:26 +0000 (00:43 -0500)
committerGreg Hudson <ghudson@mit.edu>
Mon, 13 May 2024 16:47:47 +0000 (12:47 -0400)
commitd035119c3b2b402f3ad49a4c7b6264826ea923bb
treed11952914a3be3f3971062bc0faf0949b1fe229f
parent6b74b6c18feab1f3d72d00ae412a93c6bfa4a00a
Support site-local KDC discovery via DNS

Add the sitename realm variable.  If set, service location via DNS
will be attempted using the site name as specified in [MS-ADTS]
6.3.2.3, falling back to regular discovery on failure.

[ghudson@mit.edu: made this strictly a realm variable; moved
k5_get_sitename() to locate_kdc.c and made it take a krb5_data input;
fixed a memory leak; corrected documentation changes; fleshed out
commit message]

ticket: 9124 (new)
doc/admin/conf_files/krb5_conf.rst
doc/admin/realm_config.rst
src/include/k5-int.h
src/lib/krb5/os/dnssrv.c
src/lib/krb5/os/locate_kdc.c
src/lib/krb5/os/os-proto.h