On Mon, 7 Jan 2019, Brandon Ewing wrote:

> By default, MIT kerberos will perform DNS canonicalziation of the SPN,
> controlled by the dns_canonicalize_hostname value in libdefaults:
>
> https://web.mit.edu/kerberos/krb5-latest/doc/admin/conf_files/krb5_conf.html#libdefaults
>
> However, Windows SSPI does perform any canonicalization at all that I can
> find. Chrome/Chromium appears to perform the canonicalization itself, also
> controllable via config:
>
> https://dev.chromium.org/administrators/policy-list-3#DisableAuthNegotiateCnameLookup
>
> Does curl have a similar config setting to control this behavior?

I don't even know what an SPN is and my kerberos knowledge is very sparse, but
I don't think curl has this ability

> If not, can it be added?

curl is just code. Just about anything can be added if someone just makes it
their priority!

-- 
  / daniel.haxx.se
-----------------------------------------------------------
Unsubscribe: https://cool.haxx.se/list/listinfo/curl-users
Etiquette:   https://curl.haxx.se/mail/etiquette.html