NAT with 10.2 and krb5:login....

[Everette Allen]

So following the NAT discussion begs a question:

In MacOSX if one places a v5 host entry in a local keytab file and has 
edu.mit.Kerberos with [libdefaults] with noaddresses = true what is the 
exact affect?  Seems that either login from behind the NAT still would 
not work or the machine address value in the host/machine at realm ticket 
would be ignored...  I know the security implications of not having a 
host entry in the keytab but not sure what it is to have this combination??