[4271] in Kerberos

home help back first fref pref prev next nref lref last post

Re: "Incorrect network address" Anybody fix this in V4? Is it fixed in V5?

daemon@ATHENA.MIT.EDU (Shawn Mamros)
Fri Dec 2 09:06:58 1994

To: kerberos@MIT.EDU
Date: Fri, 02 Dec 1994 08:47:52
From: mamros@ftp.com (Shawn Mamros)
Reply-To: mamros@ftp.com

snow@zso.dec.com (snow) writes:
>We have a problem with our kerberos clients having 2 ip address's.
>kinit (port 750 for kerberos) goes out one ip address imbedding that
>ip address in the ticket.  Our kerberos application (using port 548)
>connects using the other ip address.  Because the 2 ip address's don't
>match, sendauth()/recvauth() fails.

A couple possible fixes:

1) Change the call to krb_recvauth() such that the address in the
foreign address struct is 0.  That way, krb_rd_req() won't do the
address check.

2) Change krb_rd_req() itself (if you have access to the library sources)
so that it doesn't do the address check.

V4 wasn't designed to handle multi-homed hosts.  V5 fixes this.

-Shawn Mamros
E-mail to: mamros@ftp.com


home help back first fref pref prev next nref lref last post