Kerberos and IP aliases
Simon Wilkinson
simon at sxw.org.uk
Tue Sep 11 05:04:22 EDT 2007
On 11 Sep 2007, at 06:38, Mark Davies wrote:
> On Tue, 11 Sep 2007, Russ Allbery wrote:
>> I patched mod_auth_kerb a long time back to do this and thought
>> that patch was incorporated into the upstream source, but
>> apparently it wasn't. You have to patch it to not explicitly
>> import credentials and instead let the GSS-API library figure out
>> what server credentials to use.
>
> You don't happen to still have that patch lying around do you?
Whilst it's not Russ's patch (I wrote this before I realised he had
one too), I've attached the patch we use locally. If you set
KrbServiceName to 'Any', then it will accept any credential from the
keytab.
Cheers,
Simon.
More information about the Kerberos
mailing list