On 2016-11-21, Vít Ondruch <vondruch@xxxxxxxxxx> wrote:
> From: =?UTF-8?Q?V=c3=adt_Ondruch?= <vondruch@xxxxxxxxxx>
>> You mean something like this?
>>
>> ```
>> # rpm -qf /etc/krb5.conf.d/fedoraproject_org
>> fedora-packager-0.5.10.7-4.fc26.noarch
>>
>> # cat /etc/krb5.conf.d/fedoraproject_org
>> [realms]
>> FEDORAPROJECT.ORG = {
>> kdc = https://id.fedoraproject.org/KdcProxy
>> }
>> [domain_realm]
>> .fedoraproject.org = FEDORAPROJECT.ORG
>> fedoraproject.org = FEDORAPROJECT.ORG
>> ```
>>
>
> But apparently, with this snippet, I can't kinit anymore :/
>
> ```
> $ kinit vondruch@xxxxxxxxxxxxxxxxx
> kinit: Cannot contact any KDC for realm 'FEDORAPROJECT.ORG' while
> getting initial credentials
>
> $ sudo mv /etc/krb5.conf.d/fedoraproject_org{,.bak}
>
> $ kinit vondruch@xxxxxxxxxxxxxxxxx
> Password for vondruch@xxxxxxxxxxxxxxxxx:
>
> ```
This correct KDC address is obtained from DNS (dig -t SRV
_kerberos._tcp.fedoraproject.org).
-- Petr
_______________________________________________
devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
