On Fri, Feb 22, 2019 at 02:46:20PM -0500, Robbie Harwood wrote:
Jakub Hrozek <jhrozek(a)redhat.com> writes:
> On a high level, implementing this RFE requires several changes:
> * change the Kerberos locator plugin so that it can also consume
> host names in addition to numerical addresses. These host names
> would be resolved in the plugin itself and passed to libkrb5 with
> the help of a callback function libkrb5 provides to the plugin
This is tracked as
https://bugzilla.redhat.com/show_bug.cgi?id=1639895
Thank you for the link. So far we worked around this limitation by the
plugin resolving the host names on its own.
It's definitely something I do want to implement, but of course capacity
issues. I've discussed it with upstream, and have design notes (and
some preliminary work) if there are any design issues you wanted to
discuss.
So far I can't think of much. If you have some design notes already,
maybe it would be nice to see them to get more context from the krb5
side?