Re: dns_lookup_kdc

To get the realm for a host, the code tries like this:

_kerberos.host.x.y.top TXT
_kerberos.x.y.top TXT
_kerberos.y.top TXT
_kerberos.top TXT

Example from habanero (my black box):

$ dig +short _kerberos.habanero.pdc.kth.se txt

nope :(

$ dig +short _kerberos.pdc.kth.se txt
"NADA.KTH.SE"

yes :)

Then to find the KDC:

$ dig +short _kerberos._udp.NADA.KTH.SE srv
0 0 88 kdc0.nada.kth.se.
1 0 88 houting.pdc.kth.se.
2 0 88 kinilaw.pdc.kth.se.

and if there is no contact by UDP, then maybe even

$ dig +short _kerberos._tcp.NADA.KTH.SE srv
2 0 88 kinilaw.pdc.kth.se.
0 0 88 kdc0.nada.kth.se.
1 0 88 houting.pdc.kth.se.

Harald.