krb5

2017-10-17 Thread Earl Killian
I am using the krb5-1.12.5 port that comes with openSUSE 42.3. Recently the SuSE distro changed their krb5.conf to include dns_canonicalize_hostname = false rdns = false This was supposedly for security, so I applied the above to my own krb5.conf. However, this change broke kprop.

Re: krb5

2017-10-18 Thread Earl Killian
s: files netgroup: files nis publickey: files bootparams: files automount: files nis aliases:files On 10/17/17 16:44, Benjamin Kaduk wrote: > On Tue, Oct 17, 2017 at 03:04:20PM -0700, Earl Killian wrote: >> So obviously I removed the two new "security"

Re: krb5

2017-10-19 Thread Earl Killian
y the host principal to use, and ignore gethostname() altogether. -Earl On 10/18/17 17:42, Greg Hudson wrote: > On 10/17/2017 06:04 PM, Earl Killian wrote: >> However, I would like to inquire >> of the mailing list how things are supposed to work when those are set >> to false as i