Interesting problem with Kerberos IPv6 support
Sam Hartman
hartmans at MIT.EDU
Sat Jun 26 19:10:41 EDT 2004
>>>>> "Ken" == Ken Hornstein <kenh at cmf.nrl.navy.mil> writes:
Ken> However ... because the tickets forwarded across from host B
Ken> only have the IPv4 addresses in them, when you try to use the
Ken> tickets, you get the accursed "Incorrect Net Address",
Ken> because the client code on host A will use IPv6 to contact
Ken> the KDC.
I agree with Ken: forward addressless tickets to the host. Kerberos
1.3 will not include addresses in tickets it forwards if the initial
ticket has no address.
More information about the krbdev
mailing list