gokrb5 icon indicating copy to clipboard operation
gokrb5 copied to clipboard

Should `DNSLookupKDC` default to `true` to match `man krb5.conf` ?

Open ae-govau opened this issue 9 months ago • 2 comments

man krb5.conf (https://linux.die.net/man/5/krb5.conf) states:

dns_lookup_kdc Indicate whether DNS SRV records should be used to locate the KDCs and other servers for a realm, if they are not listed in the information for the realm. The default is to use these records.

whereas this library defaults DNSLookupKDC to false.

Is this a deliberate choice?

It's making it a bit challenging to use in one of our envs - where the krb5.conf is managed centrally. They don't currently set a value for dns_lookup_kdc and systems that don't use this library work fine, as they default to true, whereas those that do use this library don't work.

(thanks for providing the lib! we're using it via https://github.com/IBM/sarama)

ae-govau avatar May 17 '24 07:05 ae-govau