krb5_rd_cred checks IP address.

[Sam Hartman]

>>>>> "Steven" == Steven Michaud <smch at midway.uchicago.edu> writes:

    Steven> Why not figure out a way to leave the address-checking decision up to
    Steven> the application server?  (I.e. why not let whoever runs the
    Steven> application server use a command-line parameter to determine whether
    Steven> or not address-checking will be done?)

OK, I think my argument would be that address checking is even less
useful for rd_cred than for rd_req.