Kerberos 5 and NAT

Steven McElwee steven at
Wed Jun 19 16:04:45 EDT 2002

	We are running a firewall that is using one set of ip addresses 
for our system internally and another set is presented externally, i.e.,
NAT. How can we teach a given system to incoporate its external ip address
(note- not that assigned to its ethernet interface) in its kerberos TGT
ticket file? What are our options and what are the strengths and
        Please send a response to steven at and tmanino at
as my news reader is very, very poorly configured.

thanks in advance,
Steven McElwee, Duke University 

More information about the Kerberos mailing list