NAT with 10.2 and krb5:login....

Everette Allen Everette_Allen at
Wed Oct 2 10:08:01 EDT 2002

So following the NAT discussion begs a question:

In MacOSX if one places a v5 host entry in a local keytab file and has with [libdefaults] with noaddresses = true what is the 
exact affect?  Seems that either login from behind the NAT still would 
not work or the machine address value in the host/machine at realm ticket 
would be ignored...  I know the security implications of not having a 
host entry in the keytab but not sure what it is to have this combination??

More information about the krbdev mailing list