Interesting problem with Kerberos IPv6 support

Sam Hartman hartmans at MIT.EDU
Sat Jun 26 19:10:41 EDT 2004

>>>>> "Ken" == Ken Hornstein <kenh at> writes:

    Ken> However ... because the tickets forwarded across from host B
    Ken> only have the IPv4 addresses in them, when you try to use the
    Ken> tickets, you get the accursed "Incorrect Net Address",
    Ken> because the client code on host A will use IPv6 to contact
    Ken> the KDC.

I agree with Ken: forward addressless tickets to the host.  Kerberos
1.3 will not include addresses in tickets it forwards if the initial
ticket has no address.

More information about the krbdev mailing list