3
<title>Kerberos V5 Installation Guide</title>
4
<meta http-equiv="Content-Type" content="text/html">
5
<meta name="description" content="Kerberos V5 Installation Guide">
6
<meta name="generator" content="makeinfo 4.5">
7
<link href="http://www.gnu.org/software/texinfo/" rel="generator-home">
12
Node:<a name="Solaris%20versions%202.0%20through%202.3">Solaris versions 2.0 through 2.3</a>,
13
Next:<a rel="next" accesskey="n" href="Solaris-2.X.html#Solaris%202.X">Solaris 2.X</a>,
14
Previous:<a rel="previous" accesskey="p" href="HPUX.html#HPUX">HPUX</a>,
15
Up:<a rel="up" accesskey="u" href="OS-Incompatibilities.html#OS%20Incompatibilities">OS Incompatibilities</a>
19
<h4 class="subsection">Solaris versions 2.0 through 2.3</h4>
21
<p>The <code>gethostbyname()</code> routine is broken; it does not return a fully
22
qualified domain name, even if you are using the Domain Name Service
23
routines. Since Kerberos V5 uses the fully qualified domain name as the
24
second component of a service principal (i.e,
25
<code>host/tsx-11.mit.edu@ATHENA.MIT.EDU</code>), this causes problems for servers
26
who try to figure out their own fully qualified domain name.
32
<li> Supply your own resolver library. (such as bind-4.9.3pl1 available
35
<li> Upgrade to Solaris 2.4
37
<li> Make sure your /etc/nsswitch.conf has `files' before `dns' like:
39
<pre class="example"> hosts: files dns
42
<p>and then in /etc/hosts, make sure there is a line with your
43
workstation's IP address and hostname, with the fully qualified domain
46
<pre class="example"> 18.172.1.4 dcl.mit.edu dcl
49
<p>Note that making this change may cause other programs in your
50
environment to break or behave differently.