On 11/8/19 2:58 PM, Jerry Shipman wrote: > Hello, > Can you clarify for me exactly what dns_lookup_kdc does?
dns_lookup_kdc=false in [libdefaults] should suppress all SRV lookups by libkrb5 for realm KDCs, whether or not there is a [realms] section for the realm. In your scenario, it's possible that a locate plugin module is taking care of the lookup. This explanation is more likely if the system is running sssd. ________________________________________________ Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos