NAT with 10.2 and krb5:login....

Sam Hartman hartmans at MIT.EDU
Thu Oct 3 05:11:00 EDT 2002

>>>>> "Everette" == Everette Allen <Everette_Allen at> writes:

    Everette> So following the NAT discussion begs a question: In
    Everette> MacOSX if one places a v5 host entry in a local keytab
    Everette> file and has with [libdefaults] with
    Everette> noaddresses = true what is the exact affect?  Seems that
    Everette> either login from behind the NAT still would not work or
    Everette> the machine address value in the host/machine at realm
    Everette> ticket would be ignored...  I know the security
    Everette> implications of not having a host entry in the keytab

There is no address is host/machine at REALM, only a hostname and domain.

More information about the krbdev mailing list