[krbdev.mit.edu #1093] git commit 
    Greg Hudson via RT 
    rt-comment at krbdev.mit.edu
       
    Mon Jul 18 11:34:20 EDT 2016
    
    
  
Allow user to restrict kadmind bind addresses
kadmind has always only supported binding to the wildcard addresses.
Add three configuration options to allow specifying the address/port
that kadmind listens on for kpasswd, kadmin, and iprop connections.
[ghudson at mit.edu: edited documentation; minimized changes to
setup_loop(); added iprop_listen]
https://github.com/krb5/krb5/commit/aa91cb5dbbd4356c7a9069f4f52a10f70d91bc00
Author: Sarah Day <sarahday at mit.edu>
Committer: Greg Hudson <ghudson at mit.edu>
Commit: aa91cb5dbbd4356c7a9069f4f52a10f70d91bc00
Branch: master
 doc/admin/conf_files/kdc_conf.rst |   55 +++++++++++++++++++++++++++--
 src/include/k5-int.h              |    3 ++
 src/kadmin/server/ovsec_kadmd.c   |   14 +++++---
 src/lib/kadm5/admin.h             |   10 +++--
 src/lib/kadm5/alt_prof.c          |    8 ++++
 src/man/kdc.conf.man              |   68 +++++++++++++++++++++++++++++++++----
 6 files changed, 138 insertions(+), 20 deletions(-)
    
    
More information about the krb5-bugs
mailing list