[14509] in Kerberos

home help back first fref pref prev next nref lref last post

Re: Patch for making Kerberos work through Firewalls and NATs

daemon@ATHENA.MIT.EDU (Nicolas Williams)
Wed May 30 10:40:00 2001

Date: Wed, 30 May 2001 10:30:46 -0400
From: Nicolas Williams <Nicolas.Williams@ubsw.com>
To: Ken Hornstein <kenh@cmf.nrl.navy.mil>
Cc: Michael Bischof <mb@byteworks.ch>, kerberos@MIT.EDU
Message-ID: <20010530103045.T11153@sm2p1386swk.wdr.com>
Mail-Followup-To: Ken Hornstein <kenh@cmf.nrl.navy.mil>,
	Michael Bischof <mb@byteworks.ch>, kerberos@MIT.EDU
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
In-Reply-To: <200105301350.f4UDofo00906@ginger.cmf.nrl.navy.mil>; from kenh@cmf.nrl.navy.mil on Wed, May 30, 2001 at 09:50:39AM -0400

On Wed, May 30, 2001 at 09:50:39AM -0400, Ken Hornstein wrote:
> >> (Doesn't solve all of your problems, though).
> >
> >Which problems?
> 
> Forwarding tickets through a NAT still doesn't work, IIRC.  And ftp is
> a complete loss.

FTP? Because of the GSS channel bindings? Didn't someone post a patch to
MIT krb5 to not require GSS bindings because MS doesn't support channel
bindings, or something like that?

> --Ken


Nico
--


home help back first fref pref prev next nref lref last post