From: Wols Lists <antlists@youngman.org.uk>
To: gentoo-user@lists.gentoo.org
Subject: Re: [gentoo-user] Why do we add the local host name to the 127.0.0.1 / ::1 entry in the /etc/hosts file?
Date: Thu, 11 Mar 2021 10:54:55 +0000 [thread overview]
Message-ID: <6049F6FF.6090200@youngman.org.uk> (raw)
In-Reply-To: <2e0ee4c9-ef67-f58f-7d38-f0d8984aac40@spamtrap.tnetconsulting.net>
On 10/03/21 18:37, Grant Taylor wrote:
> ACK
>
> By default, Kerberos includes IP restrictions in tickets. It chooses
> the IP based on what the system returns. So if the system returns
> 127.0.0.1 (or ::1) for the hostname, any tickets that use that IP will
> be non-viable / useless anywhere but localhost.
Could it be (I don't use Kerberos) this tricks Kerberos into associating
127.0.0.1 with your FQDN, so it works for the first person to request
it, and then breaks for everyone else?
Also, bear in mind I think in certain setups /etc/hosts is redundant.
Don't you specify somewhere a list of services to use to look up
computer names, and if /etc/hosts is missing/disabled in that list, it
gets ignored?
Cheers,
Wol
prev parent reply other threads:[~2021-03-11 10:56 UTC|newest]
Thread overview: 26+ messages / expand[flat|nested] mbox.gz Atom feed top
2021-02-21 22:23 [gentoo-user] Why do we add the local host name to the 127.0.0.1 / ::1 entry in the /etc/hosts file? Grant Taylor
2021-02-22 6:20 ` Andrew Udvare
2021-02-25 2:37 ` Peter Humphrey
2021-02-25 2:50 ` Grant Taylor
2021-02-25 7:02 ` Arve Barsnes
2021-02-25 7:33 ` Grant Taylor
2021-03-10 5:09 ` Grant Taylor
2021-03-10 13:27 ` Mark Knecht
2021-03-10 15:25 ` Michael
2021-03-10 16:00 ` Mark Knecht
2021-03-10 16:38 ` Michael
2021-03-10 17:07 ` Grant Taylor
2021-03-10 17:01 ` Grant Taylor
2021-03-10 16:58 ` Grant Taylor
2021-03-11 13:38 ` Michael
2021-03-11 16:50 ` Grant Taylor
2021-03-12 19:04 ` Michael
2021-03-13 19:01 ` Grant Taylor
2021-03-16 12:16 ` Michael
2021-03-16 12:33 ` Peter Humphrey
2021-03-16 18:54 ` Grant Taylor
2021-03-11 17:04 ` Grant Taylor
2021-03-10 16:44 ` Grant Taylor
2021-03-10 17:43 ` Mark Knecht
2021-03-10 18:37 ` Grant Taylor
2021-03-11 10:54 ` Wols Lists [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=6049F6FF.6090200@youngman.org.uk \
--to=antlists@youngman.org.uk \
--cc=gentoo-user@lists.gentoo.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox