kclient version 2 [PSARC/2007/401 FastTrack timeout 07/13/2007]
Darren J Moffat
Darren.Moffat at sun.com
Mon Jul 9 02:08:08 PDT 2007
Roland Mainz wrote:
> Or short: The NTP service is _important_ for authentification services
> like Kerberos5 or NIS+ and using "untrusted" services like DHCP to
> distribute the information for these servers is DANGEROUS. IMO no tool
> (including "kclient"/"kserver") should include options which configure a
> "trusted" service (like Kerberos5) with an "untrusted" service like DHCP
> as basis.
kclient already does because it allows you to use DNS to lookup REALM
and KDC information.
But IMO that is offtopic here, the original issue was around kclient and
NTP.
--
Darren J Moffat
More information about the opensolaris-arc
mailing list