[krbdev.mit.edu #1093] git commit

Greg Hudson via RT rt-comment at krbdev.mit.edu
Mon Jul 18 11:34:21 EDT 2016


Allow user to restrict KDC to specific addresses

krb5kdc has always only supported binding to the wildcard addresses.
Add two configuration options to allow specifying the address/port
that krb5kdc listens on for UDP and TCP connections.

[ghudson at mit.edu: edited documentation; preserved kdc_ports = ""
behavior; made kdc_ports and kdc_tcp_ports continue to work in
kdcdefaults section]

https://github.com/krb5/krb5/commit/5f53d6cfb2cdc2e666a3fd2fe4f3ef21aa8258ae
Author: Sarah Day <sarahday at mit.edu>
Committer: Greg Hudson <ghudson at mit.edu>
Commit: 5f53d6cfb2cdc2e666a3fd2fe4f3ef21aa8258ae
Branch: master
 doc/admin/conf_files/kdc_conf.rst       |   53 +++++++++---
 doc/admin/install_kdc.rst               |    3 +-
 doc/admin/pkinit.rst                    |    2 +-
 src/config-files/kdc.conf               |    6 +-
 src/include/k5-int.h                    |    2 +
 src/kadmin/testing/proto/kdc.conf.proto |    4 +-
 src/kdc/main.c                          |  140 ++++++++++++++++---------------
 src/kdc/realm_data.h                    |    4 +-
 src/man/kdc.conf.man                    |   55 +++++++++---
 src/tests/dejagnu/config/default.exp    |   24 +++---
 src/util/k5test.py                      |    4 +-
 11 files changed, 179 insertions(+), 118 deletions(-)



More information about the krb5-bugs mailing list