Using a CNAME in the kerberos SRV record
Adam Lewenberg <[email protected]> Fri, 11 Jan 2019 08:35:33 -0800
| Newsgroups | gmane.comp.encryption.kerberos.heimdal.general |
|---|---|
| Message-ID | <[email protected]> |
I would like to change our Kerberos DNS SRV records from using an A record to a CNAME record. According to the DNS specs, a SRV record can only point to an A (or AAAA) record. I did some minimal testing, and the MIT kinit client as well as the Heimdal kinit client had no trouble with CNAME's in the SRV record. Here is the question: Has anyone on the list encountered a Kerberos client or library that used DNS discovery that COULDN'T handle an SRV record with a CNAME? Thanks, Adam Lewenberg