krb5_rd_cred checks IP address.

Sam Hartman hartmans at MIT.EDU
Thu Feb 7 16:32:00 EST 2002

>>>>> "Steven" == Steven Michaud <smch at> writes:

    Steven> Why not figure out a way to leave the address-checking decision up to
    Steven> the application server?  (I.e. why not let whoever runs the
    Steven> application server use a command-line parameter to determine whether
    Steven> or not address-checking will be done?)

OK, I think my argument would be that address checking is even less
useful for rd_cred than for rd_req.

More information about the krbdev mailing list