[7295] in Kerberos

home help back first fref pref prev next nref lref last post

krb4 address checking

daemon@ATHENA.MIT.EDU (Jeffrey C Honig)
Thu May 16 08:38:11 1996

To: kerberos@MIT.EDU
Date: 16 May 1996 12:23:18 GMT
From: jch@bsdi.com (Jeffrey C Honig)

One of our customers would like us to disable the address checking in
our kerberos 4 code.  The address checking causes no end of problems
with multi-homed hosts and they claim that it is a weak check that
does not buy much additional security.  Does this sound reasonable?

Thanks.

Jeff

home help back first fref pref prev next nref lref last post