Kerberos from behind a NAT

erik erik at geenspam.vanwesten.net
Fri Jan 31 13:46:42 EST 2003


Ian C. Shay wrote:

> I stared using a router that does IP
> forwarding to connect all of my
> home computers to the outside via
> a DSL line with a single dynamically
> assigned IP address. Naturally,
> kerberos no longer works. The wizzes
> at MIT said basically there is no
> solution except:
> (1) somehow setup the router (a
> linksys wired jabie) so that my linux
> box thinks it has the outside IP. I
> really can't see how this would work.
> Am I missing something and does
> anyone know how to do this?
> (2) get addressless KRB tickets.
> How does that work? Given that
> they only apply to KRB5, I still
> wouldn't be able to use fetchmail,
> right?
> 

What would you need kerberos for, ie what services do you want to provide? 
There are usually more solutions than kerberos, such as ssl or other secure 
means of authentication. Why kerberos and fetchmail?

EJ
-- 
Remove the obvious part (including the dot) for my email address



More information about the Kerberos mailing list