NAME

       shishi_realm_for_server_dns - API function

SYNOPSIS

       #include <shishi.h>

       char * shishi_realm_for_server_dns(Shishi * handle, char * server);

ARGUMENTS

       Shishi * handle
                   Shishi library handle create by shishi_init().

       char * server
                   hostname to find realm for.

DESCRIPTION

       Find      realm     for     a     host     using     DNS     lookups,     according     to
       draft-ietf-krb-wg-krb-dns-locate-03.txt.  Since DNS lookups may be spoofed, relying on the
       realm  information  may  result in a redirection attack.  In a single-realm scenario, this
       only achieves a denial of service, but with cross-realm trust it may  redirect  you  to  a
       compromised  realm.   For  this  reason, Shishi prints a warning, suggesting that the user
       should add the proper 'server-realm' configuration tokens instead.

       To illustrate the DNS information used, here is an extract from a zone file for the domain
       ASDF.COM:

       _kerberos.asdf.com.              IN       TXT     "ASDF.COM" _kerberos.mrkserver.asdf.com.
       IN        TXT       "MARKETING.ASDF.COM"   _kerberos.salesserver.asdf.com.   IN        TXT
       "SALES.ASDF.COM"

       Let  us  suppose  that  in  this  case,  a  client  wishes  to  use  a service on the host
       foo.asdf.com.  It would first query:

       _kerberos.foo.asdf.com. IN TXT

       Finding no match, it would then query:

       _kerberos.asdf.com. IN TXT

RETURN VALUE

       Returns realm for host, or NULL if not found.

REPORTING BUGS

       Report bugs to <bug-shishi@gnu.org>.

COPYRIGHT

       Copyright © 2002-2010 Simon Josefsson.
       Copying and distribution of this file, with or without modification, are permitted in  any
       medium without royalty provided the copyright notice and this notice are preserved.

SEE ALSO

       The  full  documentation  for  shishi  is maintained as a Texinfo manual.  If the info and
       shishi programs are properly installed at your site, the command

              info shishi

       should give you access to the complete manual.