Kerberos from behind a NAT

Ian Shay yanko at alum.mit.edu
Fri Jan 31 21:51:13 EST 2003


erik wrote:

> Ian C. Shay wrote:
>
> > I stared using a router that does IP
> > forwarding to connect all of my
> > home computers to the outside via
> > a DSL line with a single dynamically
> > assigned IP address. Naturally,
> > kerberos no longer works. The wizzes
> > at MIT said basically there is no
> > solution except:
> > (1) somehow setup the router (a
> > linksys wired jabie) so that my linux
> > box thinks it has the outside IP. I
> > really can't see how this would work.
> > Am I missing something and does
> > anyone know how to do this?
> > (2) get addressless KRB tickets.
> > How does that work? Given that
> > they only apply to KRB5, I still
> > wouldn't be able to use fetchmail,
> > right?
> >
>
> What would you need kerberos for, ie what services do you want to provide?
> There are usually more solutions than kerberos, such as ssl or other secure
> means of authentication. Why kerberos and fetchmail?
>
> EJ
> --
> Remove the obvious part (including the dot) for my email address

I use fetchmail to get my email from a KPOP server
Ian



More information about the Kerberos mailing list