Password changing from behind a NAT

Nicolas Williams Nicolas.Williams at
Mon Oct 20 12:04:31 EDT 2003

On Mon, Oct 20, 2003 at 11:19:52AM -0400, Ken Hornstein wrote:
> >The fix is to use the directional HostAddress type that's in
> >clarifications.
> Sure, that's nice if I have an infinite amount of time, _and_ I have a magic
> wand I can wave and upgrade 5000 clients on machines I don't control.  I
> was sort of looking for something _practical_.

But wouldn't you have to also change the clients to ignore the
HostAddress in the server's reply?


More information about the krbdev mailing list