Kerberos and IP aliases

[Simon Wilkinson]

On 11 Sep 2007, at 06:38, Mark Davies wrote:

> On Tue, 11 Sep 2007, Russ Allbery wrote:
>> I patched mod_auth_kerb a long time back to do this and thought
>> that patch was incorporated into the upstream source, but
>> apparently it wasn't.  You have to patch it to not explicitly
>> import credentials and instead let the GSS-API library figure out
>> what server credentials to use.
>
> You don't happen to still have that patch lying around do you?

Whilst it's not Russ's patch (I wrote this before I realised he had  
one too), I've attached the patch we use locally. If you set  
KrbServiceName to 'Any', then it will accept any credential from the  
keytab.

Cheers,

Simon.