[28398] in Kerberos
Re: Kerberos and IP aliases
daemon@ATHENA.MIT.EDU (Simon Wilkinson)
Tue Sep 11 05:05:42 2007
In-Reply-To: <200709111738.23648.mark@mcs.vuw.ac.nz>
Mime-Version: 1.0 (Apple Message framework v752.3)
Content-Type: multipart/mixed; boundary=Apple-Mail-10-740865143
Message-Id: <610F959F-4489-4C68-BF96-3A64EC07A0E5@sxw.org.uk>
From: Simon Wilkinson <simon@sxw.org.uk>
Date: Tue, 11 Sep 2007 10:04:22 +0100
To: Mark Davies <mark@mcs.vuw.ac.nz>
Cc: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu
--Apple-Mail-10-740865143
Content-Transfer-Encoding: 7bit
Content-Type: text/plain;
charset=US-ASCII;
delsp=yes;
format=flowed
On 11 Sep 2007, at 06:38, Mark Davies wrote:
> On Tue, 11 Sep 2007, Russ Allbery wrote:
>> I patched mod_auth_kerb a long time back to do this and thought
>> that patch was incorporated into the upstream source, but
>> apparently it wasn't. You have to patch it to not explicitly
>> import credentials and instead let the GSS-API library figure out
>> what server credentials to use.
>
> You don't happen to still have that patch lying around do you?
Whilst it's not Russ's patch (I wrote this before I realised he had
one too), I've attached the patch we use locally. If you set
KrbServiceName to 'Any', then it will accept any credential from the
keytab.
Cheers,
Simon.
--Apple-Mail-10-740865143
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
--Apple-Mail-10-740865143--
