From owner-freebsd-security  Sat Feb  1 14:53:33 2003
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id DB4D637B401
	for <freebsd-security@freebsd.org>; Sat,  1 Feb 2003 14:53:30 -0800 (PST)
Received: from smtpzilla3.xs4all.nl (smtpzilla3.xs4all.nl [194.109.127.139])
	by mx1.FreeBSD.org (Postfix) with ESMTP id D0F0943F43
	for <freebsd-security@freebsd.org>; Sat,  1 Feb 2003 14:53:29 -0800 (PST)
	(envelope-from steendijk@xs4all.nl)
Received: from xs4all.nl (beware.xs4all.nl [80.126.79.169])
	by smtpzilla3.xs4all.nl (8.12.0/8.12.0) with ESMTP id h11MrRKj073615
	for <freebsd-security@freebsd.org>; Sat, 1 Feb 2003 23:53:28 +0100 (CET)
Message-ID: <3E3C4FE7.99F00ED9@xs4all.nl>
Date: Sat, 01 Feb 2003 23:53:27 +0100
From: bas <steendijk@xs4all.nl>
X-Mailer: Mozilla 4.76 [en] (Windows NT 5.0; U)
X-Accept-Language: en
MIME-Version: 1.0
To: freebsd-security@freebsd.org
Subject: Re: krb5-realm.com
References: <v04210102ba60a5a98b9c@[192.168.1.27]> <3E3B1D71.21CFBD42@ursine.com> <20030201015129.GA27949@rfc822.net> <20030131181815.A42597@greg.cex.ca> <3E3B9B03.6ACE7B96@xs4all.nl> <20030201214607.GA16797@rot13.obsecurity.org>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

> > krb5-realm.com powerful beings. sounds a bit .NET to me.
> 
> What evidence do you have that this is true?
> 
> Kris

that is how i interpret the earlier mail:

> > However, it would start out by
> > looking for krb5-realm.yoursubdomain.yourdomain.com, which is fine.
> > Then it would start stepping up the tree, checking for krb5-realm.yourdomain.com,
> > then krb5-realm.com.   If the nameservers setup to host krb5-realm.com
> > stop responding to requests, then these DNS lookups take a long time,
> > waiting to eventually timeout.
> > 
> Right. And the DNS for krb5-realm.com is, to put it politely, a mess.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message