I would like to make sure all our services have Restart=always.
A list of services with the Restart value would be fine too, I could use grep on that.
Let say our realm is CARS.LOCAL and I can't change it.
Would a principal like HTTP/[email protected] works?
In other words, our internet domain name doesn't match our realm and I would like to use our registered domain name with kerberos.
The server hosting portal.houses.com and acting as a kerberos client to auth users is server1.cars.local. Reverse dns lookup works for server1.cars.local.
But portal.houses.com resolves to an ip not matching server1.cars.local in a reverse dns lookup.
Is it possible to do what I want?
Would the only way be to have an A record for portal.houses.com using a static ip and make that ip ptr record point to portal.houses.com?
I'm using Active Directory as the kerberos server.
I have a Debian Jessie installation that I boot with PXE and I need to set the hostname at boot using a script.
I used /etc/init.d/hostname.sh with the previous Debian version, but it doesn't seems to be executed at boot. Maybe because of systemd.
Does a site-to-site IPSEC vpn needs an always on connection/tunnel with keepalives or is it possible to only encrypts packets when needed (when it matches a route or something like that)?