Kerberos5 NAT and kftp

Jeffrey Altman jaltman at watsun.cc.columbia.edu
Mon Nov 25 20:30:19 EST 2002


In article <artmov$ees$1 at nntp6.u.washington.edu>,
Donn Cave <donn at u.washington.edu> wrote:
: Quoth jaltman at watsun.cc.columbia.edu (Jeffrey Altman):
: | You need to use an FTP client that allows you to disable the use 
: | of channel bindings.  See C-Kermit
: |
: |   http://www.kermit-project.org/ckermit.html
: |
: | It will do what you need when the command
: |
: |   SET AUTH K5 NO-ADDR ON
: 
: You also need a patched ftpd, right?  Or does the GSS ftpd from
: the current MIT release now support clients from behind a NAT?

The patches to ignore address bindings if not provided were 
added a couple of releases ago.  1.2.7 definitely has them.

 Jeffrey Altman * Volunteer Developer      Kermit 95 2.1 GUI available now!!!
 The Kermit Project @ Columbia University  SSH, Secure Telnet, Secure FTP, HTTP
 http://www.kermit-project.org/            Secured with MIT Kerberos, SRP, and 
 kermit-support at columbia.edu               OpenSSL.



More information about the Kerberos mailing list