>>>>> "David" == David Magda <[email protected]> writes:
David> I own the domain "magda.ca": can I get it added so that every
David> Debian (and Ubuntu) install that uses Kerberos will have that
David> domain in its krb5.conf?
David> I have a couple of friends that also have domains, can they
David> request that they be added too?
So, I'll admit a certain frustration that rather than answering the
questions I asked you responded with your own questions.
In general, if you have a realm for which SRV records in DNS will not
provide adequate/sufficient information, or for which you want to get
domain-realm configuration and cross-realm referrals will not produce
adequate results, feel free to file a wishlist bug on krb5-config.
At least until we run into problems with bogus information or so much
information being included that file size is an issue, my plan would be
to process such requests.
Note that as far as I can tell, the impact of bogus information is
purely user inconvenience, and has very little security impact.
