OS X Kerberos 4.5.1 and no-address tickets

MIT Macintosh Development Team macdev at MIT.EDU
Thu Jan 23 14:24:06 EST 2003


At 11:03 AM -0800 1/23/03, John David Duncan wrote:
>I have
>
>[appdefaults]
>    no-addresses = true
>
>in my edu.mit.Kerberos file on Mac OS X, but the Kerberos login app does
>not seem to recognize it; it still requests tickets with addresses in
>them.  This makes life behind a NAT firewall inconvenient; the only way
>to get the right tickets is by using "kinit -A" from the command line.
>
>Is this unsupported on OS X, or am I doing something wrong?

This is supported in OS X.

The correct section of the edu.mit.Kerberos file to use and entry is:

[libdefaults]
	noaddresses = TRUE

Hope this helps,

-- 
Scott McGuire / smcguire at mit.edu
MIT Information Systems Macintosh Developer



More information about the krbdev mailing list