Re: [kitten] Kerberos Service Discovery using DNS

[Nathaniel McCallum <[e-mail]>]

On Wed, 2015-03-11 at 12:35 -0400, Greg Hudson wrote:
> On 03/11/2015 12:05 PM, Benjamin Kaduk wrote:
> > Section 5.1 calls out that the default path differs from that in 
> > [MS-KKDCP].  It seems like some justification for this deviation 
> > should be
> > offered, or the gratuitous difference removed.
> 
> Section 2.1 of [MS-KKDCP] states, "The URI uses the virtual 
> directory /KdcProxy unless otherwise configured."  I don't know what 
> this actually means.  I doubt it means that software should convert a
> URI like  http://hostnameto http://hostname/KdcProxy.
> 
> In a similar vein it seems weird for this document to say anything 
> about a default path.  A URI always has a path component; it may be 
> empty.

Perhaps it would be better to say that the path may be empty and that 
the client MUST NOT try to replace an empty path with a default value?

Nathaniel