Re: [Perlgssapi-users] gss_nt_service_name
Brought to you by:
achimgrolms
From: Achim G. <ac...@gr...> - 2006-09-23 13:23:40
|
On Saturday 23 September 2006 15:19, David Leonard wrote: > Achim Grolms wrote: > > Yes, gss_nt_krb5_principal can work, because no hostnames are hardwired > > in the principal name. > Or, do you mean the client should ensure that the hostname part of the > specified target GSS host-based service name matches the DNS hostname of > the IP connection's destination host? > This is addressed by RFC 2743: Yes. gss_nt_krb5_principal means no hostnamelookups or anything of that kind. Achim |