if (!krb_ignore_ip_address && from_addr && (ad->address != from_addr))
return(RD_AP_BADD);
krb_ignore_ip_address is a global compile time variable.
- If you build your deamons with this turned off then most of the
evil NAT problems go away. My patch uses an env variable to turn
it on if you really need it. You can find it at
http://www.stanford.edu/~bbense/stanford_krb_patches
- Booker C. Bense