On Tue, Jan 14, 2025 at 10:47:35PM +0100, Emmanuel Fusté wrote:

! localhost is defined as a (local) hostname of the loopback interface, not a
! domain name.

Where would that be defined? Because, what You state is a
contradiction in itself: a hostname is a designation of the metal
(or virtual, nowadays), it has nothing to do with interfaces
(An interface cannot possess the host, just like a door cannot
possess the room),

Considering the hostname eqivalent to an address label on an
interface (no matter if that might be stored in DNS or elsewhere) is a
common misunderstanding by people who do not know that more than one
interface card can be installed in a machine, neither that ip
aliases do exist.

The result of this misunderstanding is what makes Kerberos
configuration a venture into hell - because the designers insisted
that a hostname and an address label are the same and therefore
that there can be only one address for a host.
The only sensible way to cope with such designs is then to give them
localhost as their desired domain name (that one is always valid):

root@edge:~ # ktutil list
Vno  Type                     Principal                     Aliases
  1  aes256-cts-hmac-sha1-96  host/localhost@INTRA.PHASE23  

This works as long as one doesn't allow Kerberos from [ab]using DNS
for storage. It might even work with DNS when implementing subdomains
under "localhost" in an appropriate way.

Have fun,
PMc
-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Reply via email to