On Mon, 2010-02-22 at 16:56 -0500, Abe Singer wrote: > Am I missing something in the documentation, or is there no way to tell > krb5kdc to bind to a single network interface (as oppposed to binding to > all of them)? My reading of the code is that the KDC listener sockets are always bound to INADDR_ANY (or the IPv6 equivalent).