From owner-freebsd-security  Tue Oct  9 14:59:20 2001
Delivered-To: freebsd-security@freebsd.org
Received: from khavrinen.lcs.mit.edu (khavrinen.lcs.mit.edu [18.24.4.193])
	by hub.freebsd.org (Postfix) with ESMTP id 0371D37B409
	for <security@FreeBSD.ORG>; Tue,  9 Oct 2001 14:59:18 -0700 (PDT)
Received: (from wollman@localhost)
	by khavrinen.lcs.mit.edu (8.11.4/8.11.4) id f99LxF654550;
	Tue, 9 Oct 2001 17:59:15 -0400 (EDT)
	(envelope-from wollman)
Date: Tue, 9 Oct 2001 17:59:15 -0400 (EDT)
From: Garrett Wollman <wollman@khavrinen.lcs.mit.edu>
Message-Id: <200110092159.f99LxF654550@khavrinen.lcs.mit.edu>
To: David Kirchner <davidk@accretivetg.com>
Cc: <security@FreeBSD.ORG>
Subject: heads up? ssh, krb5-realm.{com,net}
In-Reply-To: <20011009130922.C85958-100000@localhost>
References: <20011009130922.C85958-100000@localhost>
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

<<On Tue, 9 Oct 2001 13:13:47 -0700 (PDT), David Kirchner <davidk@accretivetg.com> said:

> This problem just started showing up for us today. Apparently, the openssh
> that comes with 4.2-R has some strange bug in that it looks up krb5-realm
> in DNS even though no Kerberos server was ever configured in any file on
> the system. (Dangerous to have this default, no?)

Your DNS resolver is mis-configured; you're probably using a `domain
foo.com' in /etc/resolv.conf when you should have said `search
foo.com' instead.  It is never correct to include a TLD in your search
list.

-GAWollman


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message