Re: root/ host/ <uid 0 service like nfs>/ ?!?

On Wed, Oct 05, 2011 at 11:33:08AM +0200, [email protected] wrote:
> Do not forget that
> a principal name only makes sence given both the application and the
> actual realm.

More correctly: "makes sense only in the context of its use".

> host/admin@FOO does not imply the same use as host/admin@BAR
> while there is nothing wrong with these names - _if_ the corresponding
> applications (say, the kdc in FOO and the site dhcp manager in BAR)
> are the only ones using the corresponding principals.

It was actually a bad expression. Better:
(say, the kdc in FOO and a site dhcp manager _using_ BAR)

The applications do not "belong to a realm", they are just using a
realm's authentication service.
An application can as well use several realms, even simultaneously.

Rune