[6411] in Release_7.7_team
Re: Does the perl Cyrus IMAP service break when accessed through
daemon@ATHENA.MIT.EDU (Greg Hudson)
Tue Aug 18 00:49:44 2009
From: Greg Hudson <ghudson@MIT.EDU>
To: William Cattey <wdc@mit.edu>
Cc: "jdreed@mit.edu" <jdreed@mit.edu>,
"release-team@mit.edu" <release-team@mit.edu>
In-Reply-To: <871F2431-A781-446E-BA13-6E1F21FBEBA4@mit.edu>
Content-Type: text/plain
Date: Tue, 18 Aug 2009 00:49:36 -0400
Message-Id: <1250570976.6898.64.camel@ray>
Mime-Version: 1.0
Content-Transfer-Encoding: 7bit
X-Spam-Flag: NO
X-Spam-Score: 0.00
Kerberos 4 apps sometimes work behind a NAT. The authentication
exchange generally works fine, but if the app is wrapping messages with
mk_safe or mk_priv, the "direction bit" may come out wrong due to
address translation.
Since a lot of krb4 apps are lazy and just do an authentication exchange
without protecting the stream, you still sometimes win.
