Kerberos from behind a NAT

Ian C. Shay yanko at alum.mit.edu
Fri Jan 31 11:55:42 EST 2003


I stared using a router that does IP
forwarding to connect all of my
home computers to the outside via
a DSL line with a single dynamically
assigned IP address. Naturally,
kerberos no longer works. The wizzes
at MIT said basically there is no
solution except:
(1) somehow setup the router (a
linksys wired jabie) so that my linux
box thinks it has the outside IP. I
really can't see how this would work.
Am I missing something and does
anyone know how to do this?
(2) get addressless KRB tickets.
How does that work? Given that
they only apply to KRB5, I still
wouldn't be able to use fetchmail,
right?

Ian




More information about the Kerberos mailing list