From bsam@bsam.ru  Tue Jun 14 10:35:20 2005
Return-Path: <bsam@bsam.ru>
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id B9F4C16A41C
	for <FreeBSD-gnats-submit@freebsd.org>; Tue, 14 Jun 2005 10:35:20 +0000 (GMT)
	(envelope-from bsam@bsam.ru)
Received: from bsam.ru (gw.ipt.ru [80.253.10.66])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 6F5DA43D48
	for <FreeBSD-gnats-submit@freebsd.org>; Tue, 14 Jun 2005 10:35:19 +0000 (GMT)
	(envelope-from bsam@bsam.ru)
Received: from bsam by bsam.ru with local (Exim 4.30; FreeBSD)
	id 1Di8lE-000IXX-9Y
	for FreeBSD-gnats-submit@freebsd.org; Tue, 14 Jun 2005 14:35:12 +0400
Message-Id: <E1Di8lE-000IXX-9Y@bsam.ru>
Date: Tue, 14 Jun 2005 14:35:12 +0400
From: Boris B. Samorodov <bsam@ipt.ru>
Sender: "Boris B. Samorodov" <bsam@bsam.ru>
Reply-To: Boris B. Samorodov <bsam@ipt.ru>
To: FreeBSD-gnats-submit@freebsd.org
Cc:
Subject: [Kerberos] Error at Handbook
X-Send-Pr-Version: 3.113
X-GNATS-Notify:

>Number:         82223
>Category:       docs
>Synopsis:       [Kerberos] Error at Handbook
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-doc
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          doc-bug
>Submitter-Id:   current-users
>Arrival-Date:   Tue Jun 14 10:40:23 GMT 2005
>Closed-Date:    Sun Jul 10 10:45:33 GMT 2005
>Last-Modified:  Sun Jul 10 10:45:33 GMT 2005
>Originator:     Boris B. Samorodov
>Release:        FreeBSD 5.4-RELEASE-p1 i386
>Organization:
InPharmTech
>Environment:
System: FreeBSD srv.sem.ipt.ru 5.4-RELEASE-p1 FreeBSD 5.4-RELEASE-p1 #0: Fri May 27 13:22:04 MSD 2005 bsam@srv.sem.ipt.ru:/usr/obj/usr/src/sys/SRV i386


>Description:
	According to FreeBSD Handbook (14.8.2 Setting up a Heimdal KDC) one
	should config DNS server by adding:
	-----
	_kerberos           IN  TXT     EXAMPLE.ORG.
	-----

	This doesn't work. DNS servers returns: text = "EXAMPLE.ORG.".
	This is right, because RFC 1035 allows up to 16 character strings at
	this field (assuming that noting should be prepended to the field if
	it doesn't end with a point).

	Thus I've got at KDC log:
	-----
	2005-06-10T23:57:07 Server not found in database: krbtgt/EXAMPLE.ORG.@EXAMPLE.ORG: No such entry in the database
	----
	(lookat the point before '@').

	Everythig is fine when changing DNS TXT record to "EXAMPLE.ORG"
	(without a dot at the end).

	BTW, NetBSD FAQ does not have such error:
	http://www.netbsd.org/Documentation/network/#kerberos

>How-To-Repeat:
	Configure DNS as was shown earlier and try to receive kerberos ticket.
>Fix:
	Remove the trailing dot at TXT record (english and other languages).

--
bsam
>Release-Note:
>Audit-Trail:
State-Changed-From-To: open->closed 
State-Changed-By: remko 
State-Changed-When: Sun Jul 10 10:45:08 GMT 2005 
State-Changed-Why:  
I changed the entry in the handbook. Thanks for the submission! 
It should appear within 24hours. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=82223 
>Unformatted:
