[krbdev.mit.edu #1093] git commit

Greg Hudson via RT rt-comment at krbdev.mit.edu
Mon Jul 18 11:34:20 EDT 2016


Allow user to restrict kadmind bind addresses

kadmind has always only supported binding to the wildcard addresses.
Add three configuration options to allow specifying the address/port
that kadmind listens on for kpasswd, kadmin, and iprop connections.

[ghudson at mit.edu: edited documentation; minimized changes to
setup_loop(); added iprop_listen]

https://github.com/krb5/krb5/commit/aa91cb5dbbd4356c7a9069f4f52a10f70d91bc00
Author: Sarah Day <sarahday at mit.edu>
Committer: Greg Hudson <ghudson at mit.edu>
Commit: aa91cb5dbbd4356c7a9069f4f52a10f70d91bc00
Branch: master
 doc/admin/conf_files/kdc_conf.rst |   55 +++++++++++++++++++++++++++--
 src/include/k5-int.h              |    3 ++
 src/kadmin/server/ovsec_kadmd.c   |   14 +++++---
 src/lib/kadm5/admin.h             |   10 +++--
 src/lib/kadm5/alt_prof.c          |    8 ++++
 src/man/kdc.conf.man              |   68 +++++++++++++++++++++++++++++++++----
 6 files changed, 138 insertions(+), 20 deletions(-)



More information about the krb5-bugs mailing list