[38033] in Kerberos
client IP address in Kerberos ticket.
daemon@ATHENA.MIT.EDU (Jim Shi)
Fri Jul 21 17:09:17 2017
Date: Fri, 21 Jul 2017 21:09:01 +0000 (UTC)
From: Jim Shi <hjshi@yahoo.com>
To: Kerberos <kerberos@mit.edu>
Message-ID: <21315697.2316684.1500671341017@mail.yahoo.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Errors-To: kerberos-bounces@mit.edu
Content-Transfer-Encoding: 8bit
Hi, I have question regarding client IP address checking in KDC.
Is that true that by default tickets issued by KDC is not bound to any client IP address.
Also KDC server does not check IP if the ticket does not have any client IP address in it.
Do we have to explicitly turn on the client IP address checking on KDC? How to do it?
Thank you very much.
Jim
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
