Kerberos and IP aliases

Simon Wilkinson simon at sxw.org.uk
Tue Sep 11 05:04:22 EDT 2007


On 11 Sep 2007, at 06:38, Mark Davies wrote:

> On Tue, 11 Sep 2007, Russ Allbery wrote:
>> I patched mod_auth_kerb a long time back to do this and thought
>> that patch was incorporated into the upstream source, but
>> apparently it wasn't.  You have to patch it to not explicitly
>> import credentials and instead let the GSS-API library figure out
>> what server credentials to use.
>
> You don't happen to still have that patch lying around do you?

Whilst it's not Russ's patch (I wrote this before I realised he had  
one too), I've attached the patch we use locally. If you set  
KrbServiceName to 'Any', then it will accept any credential from the  
keytab.

Cheers,

Simon.


More information about the Kerberos mailing list