Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 9 Oct 2001 17:59:15 -0400 (EDT)
From:      Garrett Wollman <wollman@khavrinen.lcs.mit.edu>
To:        David Kirchner <davidk@accretivetg.com>
Cc:        <security@FreeBSD.ORG>
Subject:   heads up? ssh, krb5-realm.{com,net}
Message-ID:  <200110092159.f99LxF654550@khavrinen.lcs.mit.edu>
In-Reply-To: <20011009130922.C85958-100000@localhost>
References:  <20011009130922.C85958-100000@localhost>

next in thread | previous in thread | raw e-mail | index | archive | help
<<On Tue, 9 Oct 2001 13:13:47 -0700 (PDT), David Kirchner <davidk@accretivetg.com> said:

> This problem just started showing up for us today. Apparently, the openssh
> that comes with 4.2-R has some strange bug in that it looks up krb5-realm
> in DNS even though no Kerberos server was ever configured in any file on
> the system. (Dangerous to have this default, no?)

Your DNS resolver is mis-configured; you're probably using a `domain
foo.com' in /etc/resolv.conf when you should have said `search
foo.com' instead.  It is never correct to include a TLD in your search
list.

-GAWollman


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200110092159.f99LxF654550>