Kerberos 5 and NAT

Steven McElwee steven at acpub.duke.edu
Wed Jun 19 16:04:45 EDT 2002


Hi,
	We are running a firewall that is using one set of ip addresses 
for our system internally and another set is presented externally, i.e.,
NAT. How can we teach a given system to incoporate its external ip address
(note- not that assigned to its ethernet interface) in its kerberos TGT
ticket file? What are our options and what are the strengths and
weaknesses.
        Please send a response to steven at duke.edu and tmanino at duke.edu
as my news reader is very, very poorly configured.

thanks in advance,
Steven McElwee, Duke University 





More information about the Kerberos mailing list