gokrb5
gokrb5 copied to clipboard
Should `DNSLookupKDC` default to `true` to match `man krb5.conf` ?
man krb5.conf
(https://linux.die.net/man/5/krb5.conf) states:
dns_lookup_kdc Indicate whether DNS SRV records should be used to locate the KDCs and other servers for a realm, if they are not listed in the information for the realm. The default is to use these records.
whereas this library defaults DNSLookupKDC
to false
.
Is this a deliberate choice?
It's making it a bit challenging to use in one of our envs - where the krb5.conf
is managed centrally. They don't currently set a value for dns_lookup_kdc
and systems that don't use this library work fine, as they default to true
, whereas those that do use this library don't work.
(thanks for providing the lib! we're using it via https://github.com/IBM/sarama)