[OpenAFS] Re: differences between aklog on Windows and Unix?

[Adam Megacz]

Ken Hornstein <kenh@cmf.nrl.navy.mil> writes:
> You're using the Apple-supplied Kerberos library on OS X, right?

Yes.

> Did you look at /Library/Preferences/edu.mit.Kerberos?

Yes.

> I thought maybe Apple turned this on by default, but a test program
> I whipped up makes me believe that they didn't; a TXT record query
> only happens when I set dns_lookup_realm to true.

No; here's my edu.mit.Kerberos (aka krb5.conf)

I'm truly baffled by why this is working on some machines and not
others.

  - a


megacz@maxwell:~$cat /Library/Preferences/edu.mit.Kerberos
[libdefaults]
        default_realm = MEGACZ.COM
        noaddresses = TRUE

[realms]
        ATHENA.MIT.EDU = {
                kdc = kerberos.mit.edu.:88
                kdc = kerberos-1.mit.edu.:88
                kdc = kerberos-2.mit.edu.:88
                admin_server = kerberos.mit.edu.
                default_domain = mit.edu
        }


[domain_realm]
        .mit.edu = ATHENA.MIT.EDU
        mit.edu = ATHENA.MIT.EDU

[v4 realms]
        ATHENA.MIT.EDU = {
                kdc = kerberos.mit.edu.
                kdc = kerberos-1.mit.edu.
                kdc = kerberos-2.mit.edu.
                admin_server = kerberos.mit.edu.
                default_domain = mit.edu
                string_to_key_type = mit_string_to_key
        }

[v4 domain_realm]
        .mit.edu = ATHENA.MIT.EDU
        mit.edu = ATHENA.MIT.EDU