docs/82223: [Kerberos] Error at Handbook

[Boris B. Samorodov]

>Number:         82223
>Category:       docs
>Synopsis:       [Kerberos] Error at Handbook
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-doc
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          doc-bug
>Submitter-Id:   current-users
>Arrival-Date:   Tue Jun 14 10:40:23 GMT 2005
>Closed-Date:
>Last-Modified:
>Originator:     Boris B. Samorodov
>Release:        FreeBSD 5.4-RELEASE-p1 i386
>Organization:
InPharmTech
>Environment:
System: FreeBSD srv.sem.ipt.ru 5.4-RELEASE-p1 FreeBSD 5.4-RELEASE-p1 #0: Fri May 27 13:22:04 MSD 2005 bsam at srv.sem.ipt.ru:/usr/obj/usr/src/sys/SRV i386


>Description:
	According to FreeBSD Handbook (14.8.2 Setting up a Heimdal KDC) one
	should config DNS server by adding:
	-----
	_kerberos           IN  TXT     EXAMPLE.ORG.
	-----

	This doesn't work. DNS servers returns: text = "EXAMPLE.ORG.".
	This is right, because RFC 1035 allows up to 16 character strings at
	this field (assuming that noting should be prepended to the field if
	it doesn't end with a point).

	Thus I've got at KDC log:
	-----
	2005-06-10T23:57:07 Server not found in database: krbtgt/EXAMPLE.ORG. at EXAMPLE.ORG: No such entry in the database
	----
	(lookat the point before '@').

	Everythig is fine when changing DNS TXT record to "EXAMPLE.ORG"
	(without a dot at the end).

	BTW, NetBSD FAQ does not have such error:
	http://www.netbsd.org/Documentation/network/#kerberos

>How-To-Repeat:
	Configure DNS as was shown earlier and try to receive kerberos ticket.
>Fix:
	Remove the trailing dot at TXT record (english and other languages).

--
bsam
>Release-Note:
>Audit-Trail:
>Unformatted: