Re: Does KDC service need the [realms] section in its configuration file?
Harald Barth <[email protected]> Mon, 14 May 2018 11:58:05 +0200 (CEST)
| Newsgroups | gmane.comp.encryption.kerberos.heimdal.general |
|---|---|
| Message-ID | <[email protected]> |
> [realms]
> stanford.edu = {
> kdc = kdc-master-dev.stanford.edu
> master_kdc = kdc-master-dev.stanford.edu
> admin_server = kdc-master-dev.stanford.edu
> kpasswd_server = kdc-master-dev.stanford.edu
> default_domain = stanford.edu
> kadmind_port = 749
> }
I think these settings are only used if libkrb needs to contact a
realm "on the net" and as the KDC does not make any outgoing
connections AFAIK that part should be unused. Just my 5c.
Harald.