[1639] in Kerberos

home help back first fref pref prev next nref lref last post

Re: krb4 multihome fix?

daemon@ATHENA.MIT.EDU (Hilary Jones)
Thu Nov 14 17:18:49 1991

Date: Thu, 14 Nov 91 13:40:27 -0800
From: hilary@snll-arpagw.llnl.gov (Hilary Jones)
To: exuksm@exu.ericsson.se
Cc: hilary@snll-arpagw.MIT.EDU, kerberos@Athena.MIT.EDU

I have modified Kerberos to solve the multi-homed host problem for a MIPS
machine.  I don't see why the same fix wouldn't apply to Sun's and other
platforms.  Very briefly, I have modified rd_safe.c, rd_req.c, and rd_priv.c
to call a new routine called chkaddrs.  The new routine compares two
IP addresses and concludes whether they are on the same host or not.
The routine makes the decision by looking in /etc/hosts for entries having
a common host name or alias.  For example, if these two entries are in the
file:
	1.2.3.4	myhost-fddi myhost-k
	5.6.7.8 myhost-enet myhost-k
then addresses 1.2.3.4 and 5.6.7.8 are assumed to be on the same host.
It does not present any problems to have two IP addresses labeled with
the same name.  I use the hyphen-k convention to indicate that this is 
the "Kerberos" name.  I would be willing to share the code for chkaddrs with 
anyone who wants it.

I understand that K5 solves the multi-homed host problem.  Does anyone
out there know how it knows which addresses belong to the same host?

Hilary


home help back first fref pref prev next nref lref last post