Interesting problem with Kerberos IPv6 support
Ken Hornstein
kenh at cmf.nrl.navy.mil
Mon Jun 28 11:07:36 EDT 2004
>> Sigh, there's no good solution, unfortunately. Forcing a
>> client upgrade just because you add an IPv6 interface to a
>> machine sucks.
>
>Is this suggesting there needs to be a global "NO-IPv6" or
>"IPv4-only" compile setting for Kerberos, if there isn't already ?
Actually, given my druthers, I'd rather there be a runtime knob, if we're
talking about knobs.
>That gives you time to u/g clients and use IPv6 on the KDC
>(just not for Kerberos) ? Unless using Ipv6 & kerberos is
>the entire reason for this.
Unfortunately, using IPv6 and Kerberos _is_ the entire reason for this.
--Ken
More information about the krbdev
mailing list