How are realms named? Do they really have to be uppercase?
In theory, the realm name is arbitrary. You can call your realm whatever youwant.However, in practice a Kerberos realm is named by uppercasing the DNS domainname associated with the hosts in the to-be named realm. In other words, ifyour hosts are all in the foo.org domain, you might call your Kerberos realmFOO.ORG.If you wish to have more than one Kerberos realm associated with the sameDNS domain name, the convention is to create realms that are in the samehierarchy of your DNS domain name. For example, if you wish to have twoKerberos realms in the DNS domain foo.org for Human Resources and Sales, youmight create the Kerberos realms HR.FOO.ORG and SALES.FOO.ORG.The convention to use uppercase for realms names arose out of the desire toeasily distinguish between DNS domain names (which are actuallycase-insensitive) and Kerberos realms. The Kerberos realm name is casesensitive (the realm foo.org is different than the realm FOO.ORG).
In theory, the realm name is arbitrary. You can call your realm whatever you want. However, in practice a Kerberos realm is named by uppercasing the DNS domain name associated with the hosts in the to-be named realm. In other words, if your hosts are all in the foo.org domain, you might call your Kerberos realm FOO.ORG. If you wish to have more than one Kerberos realm associated with the same DNS domain name, the convention is to create realms that are in the same hierarchy of your DNS domain name. For example, if you wish to have two Kerberos realms in the DNS domain foo.org for Human Resources and Sales, you might create the Kerberos realms HR.FOO.ORG and SALES.FOO.ORG. The convention to use uppercase for realms names arose out of the desire to easily distinguish between DNS domain names (which are actually case-insensitive) and Kerberos realms. The Kerberos realm name is case sensitive (the realm foo.org is different than the realm FOO.ORG).
