Add support for DNS in non-Windows environments

[SteveSyfuhs]

Is your feature request related to a problem? Please describe.
DNS lookups only work on Windows today because it calls into win32 APIs directly. .NET doesn't provide a way to query for SRV records.

Describe the solution you'd like
The library needs a way to make DNS queries outside of Windows. The solution should be to provide a way to bring your own DNS implementation that way you can use something like https://github.com/MichaCo/DnsClient.NET on other platforms.

Describe alternatives you've considered
You could rely completely on a krb5 configuration file to provide all the necessary records, but that's complicated and messy.

Additional context
Design should be similar to the CryptoPal so callers can register their DNS mechanisms. A side-car nuget package could be created that wires in the DnsClient.NET implementation.

[SteveSyfuhs]

For folks running into this issue, there's a super simple platform-independent implementation available in the Bruce tool. It uses the DnsClient.NET library as mentioned above. It's kept out of the main project reduce total external dependencies.

Kerberos.NET/Bruce/Dns/PlatformIndependentDnsClient.cs

Lines 1 to 50 in 946daea

	using System;
	using System.Collections.Generic;
	using System.Linq;
	using System.Threading.Tasks;
	using DnsClient;
	using Kerberos.NET.Dns;
	namespace Kerberos.NET.CommandLine.Dns
	{
	internal class PlatformIndependentDnsClient : IKerberosDnsQuery
	{
	private static readonly WindowsDnsQuery WindowsDns = new WindowsDnsQuery();
	public async Task<IReadOnlyCollection<DnsRecord>> Query(string query, DnsRecordType type)
	{
	if (WindowsDns.IsSupported)
	{
	return await WindowsDns.Query(query, type);
	}
	var client = new LookupClient();
	var response = await client.QueryAsync(query, (QueryType)type);
	var srvRecords = response.Answers.SrvRecords().Select(a => new DnsRecord
	{
	Name = a.DomainName,
	Port = a.Port,
	Priority = a.Priority,
	Target = a.Target,
	TimeToLive = a.TimeToLive,
	Type = DnsRecordType.SRV,
	Weight = a.Weight
	}).ToList();
	var merged = srvRecords.GroupBy(r => r.Name);
	foreach (var srv in srvRecords)
	{
	var c1 = merged.Where(m => m.Key.Equals(srv.Target, StringComparison.InvariantCultureIgnoreCase));
	var canon = c1.SelectMany(r => r);
	srv.Canonical = canon.ToList();
	}
	return srvRecords;
	}
	}
	}

[MageFroh]

This class is very useful, but a bit hard to find. Is there a NuGet package that includes it? Would be great to be able to include something like Kerberos.NET.Portable, instead of copying the class in all projects that need it.

[SteveSyfuhs]

PR's are accepted to get that working.

[0x5ECF4ULT]

As requested by the contribution guidelines: I'm working on it

[SteveSyfuhs]

Awesome! The build process is somewhat of a pain to verify, but it should just be a matter of duplicating the kerberos.net lines in the build file and replacing the names with the new project/package name (https://github.com/dotnet/Kerberos.NET/blob/develop/build.yaml)

[petrsnd]

@SteveSyfuhs Would it be appropriate to mark this issue as closed based on the work we merged with #402?

[SteveSyfuhs]

Yes, I think so.

…

________________________________ From: Dan Peterson ***@***.***> Sent: Friday, November 21, 2025 7:49:38 AM To: dotnet/Kerberos.NET ***@***.***> Cc: Mention ***@***.***>; Author ***@***.***>; Comment ***@***.***>; Subscribed ***@***.***> Subject: Re: [dotnet/Kerberos.NET] Add support for DNS in non-Windows environments (Issue #185) @SteveSyfuhs<https://github.com/SteveSyfuhs> Would it be appropriate to mark this issue as closed based on the work we merged with #402<#402>? — Reply to this email directly, view it on GitHub<#185 (comment)> or unsubscribe<https://github.com/notifications/unsubscribe-auth/AAJHTYJU45J5IIRFK5MXRYD354YBFBFHORZGSZ3HMVZKMY3SMVQXIZNMON2WE2TFMN2F65DZOBS2YSLTON2WKQ3PNVWWK3TUUZ2G64DJMNZZFAVEOR4XAZNKOJSXA33TNF2G64TZUV3GC3DVMWUDQNJUHA4TCMZYQKSHI6LQMWSWS43TOVS2K5TBNR2WLKJWHA2DEMJRGU2DPKTBOR2HE2LCOV2GK44WQKSXMYLMOVS2I5DSOVS2I3TBNVS3W5DIOJSWCZC7OBQXE5DJMNUXAYLOORPWCY3UNF3GS5DZQKSXMYLMOVS2I5DSOVS2I3TBNVS2453BORRWQX3BMN2GS5TJOR4YFJLWMFWHKZNFNFZXG5LFURXGC3LFVN2GQ4TFMFSF65DZOBSYFJLWMFWHKZNHGM4DINZYHE32I3TBNVS2QYLDORXXEX3JMSBKK5TBNR2WLKJVGY2DENZSGM2TPJDOMFWWLKLIMFZV63DBMJSWZAVFOZQWY5LFVE2TMNBSG4ZDGNJYURXGC3LFVFUGC427NRQWEZLM>. You are receiving this email because you were mentioned. Triage notifications on the go with GitHub Mobile for iOS<https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675> or Android<https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub>.