AdressLess Ticket restriction by KDC server side

Jeffrey Altman jaltman at secure-endpoints.com
Tue Mar 25 11:54:20 EDT 2008


Andrea wrote:
> Hi all,
> I'm looking for a way to force the KDC server to release only
> addressless tickets, that is, even if a client is looking/asking  for
> a ticket with address, the KDC will always give back an addressless
> ticket.
>
> So, is there an entry on the kdc.conf or something else that allow me
> to obtain what I said above?
>
> P.S: The solution on which I have to put just into krb5.conf an entry
> such as noaddresses=true doesn't accomplish my goal.
>
Recent clients only request addressless tickets unless 
'noaddresses=false' is set


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3355 bytes
Desc: S/MIME Cryptographic Signature
Url : http://mailman.mit.edu/pipermail/kerberos/attachments/20080325/aa0c104e/attachment.bin


More information about the Kerberos mailing list