Re: Does KDC service need the [realms] section in its configuration file?

Harald Barth <[email protected]> Mon, 14 May 2018 11:58:05 +0200 (CEST)
Newsgroups gmane.comp.encryption.kerberos.heimdal.general
Message-ID <[email protected]>
> [realms]
>     stanford.edu = {
>         kdc            = kdc-master-dev.stanford.edu
>         master_kdc     = kdc-master-dev.stanford.edu
>         admin_server   = kdc-master-dev.stanford.edu
>         kpasswd_server = kdc-master-dev.stanford.edu
>         default_domain = stanford.edu
>         kadmind_port   = 749
>     }

I think these settings are only used if libkrb needs to contact a
realm "on the net" and as the KDC does not make any outgoing
connections AFAIK that part should be unused. Just my 5c.

Harald.