krb5_rd_cred checks IP address.
hartmans at MIT.EDU
Thu Feb 7 16:32:00 EST 2002
>>>>> "Steven" == Steven Michaud <smch at midway.uchicago.edu> writes:
Steven> Why not figure out a way to leave the address-checking decision up to
Steven> the application server? (I.e. why not let whoever runs the
Steven> application server use a command-line parameter to determine whether
Steven> or not address-checking will be done?)
OK, I think my argument would be that address checking is even less
useful for rd_cred than for rd_req.
More information about the krbdev