Interesting problem with Kerberos IPv6 support

Ken Hornstein kenh at cmf.nrl.navy.mil
Mon Jun 28 11:07:36 EDT 2004


>> Sigh, there's no good solution, unfortunately.  Forcing a 
>> client upgrade just because you add an IPv6 interface to a 
>> machine sucks.
>
>Is this suggesting there needs to be a global "NO-IPv6" or
>"IPv4-only" compile setting for Kerberos, if there isn't already ?

Actually, given my druthers, I'd rather there be a runtime knob, if we're
talking about knobs.

>That gives you time to u/g clients and use IPv6 on the KDC
>(just not for Kerberos) ?  Unless using Ipv6 & kerberos is
>the entire reason for this.

Unfortunately, using IPv6 and Kerberos _is_ the entire reason for this.

--Ken


More information about the krbdev mailing list