How to prevent hosts (clients) with no keytab from obtaining tickets

[Steven Miller]

I've set verify_ap_req_nofail in krb5.conf and hosts
without a keytab can still connect and obtain tickets.
Am I misunderstanding what this option does?


thanks in advance,

Steve


      ____________________________________________________________________________________
Be a better sports nut!  Let your teams follow you 
with Yahoo Mobile. Try it now.  http://mobile.yahoo.com/sports;_ylt=At9_qDKvtAbMuh1G1SQtBI7ntAcJ