On Feb 20, 12:40pm, [EMAIL PROTECTED] wrote:
} Subject: KDC does not accept requests through loopback interface

> Hello, group:

Good morning, hope your day is going well.

> I have been testing the Fedora distribution of Kerberos and tripped
> on a problem: after upgrading from Fedora core 3 to Fedora core 4 in
> my KDC the KDC stopped receiving requests for tickets through the
> loopback interface.

MIT stopped having their KDC listen on loopback a while ago.  It is
mildly irritating especially when doing laptop based development.

The following patch is against 1.4.3 but should pretty much fit
against 1.4.1.  Apply the patch and rebuild krb5kdc and you will be
able to use the loopback interface.

Cut here. -----------------------------------------------------------------
diff -urN v1.4.3/krb5-1.4.3/src/lib/krb5/os/localaddr.c 
krb5-1.4.3/src/lib/krb5/os/localaddr.c
--- v1.4.3/krb5-1.4.3/src/lib/krb5/os/localaddr.c       Wed Oct  6 18:51:21 2004
+++ krb5-1.4.3/src/lib/krb5/os/localaddr.c      Thu Nov 24 07:28:17 2005
@@ -584,6 +584,7 @@
            }
            /[EMAIL PROTECTED]@*/
 
+#if 0
 #ifdef IFF_LOOPBACK
            /* None of the current callers want loopback addresses.  */
            if (lifreq.lifr_flags & IFF_LOOPBACK) {
@@ -591,6 +592,7 @@
                goto skip;
            }
 #endif
+#endif
            /* Ignore interfaces that are down.  */
            if ((lifreq.lifr_flags & IFF_UP) == 0) {
                Tprintf (("  down\n"));
@@ -972,12 +974,14 @@
        }
        /[EMAIL PROTECTED]@*/
 
+#if 0
 #ifdef IFF_LOOPBACK
        /* None of the current callers want loopback addresses.  */
        if (ifreq.ifr_flags & IFF_LOOPBACK) {
            Tprintf (("  loopback\n"));
            goto skip;
        }
+#endif
 #endif
        /* Ignore interfaces that are down.  */
        if ((ifreq.ifr_flags & IFF_UP) == 0) {
And here.------------------------------------------------------------------

> Andres Villarreal.

Good luck with your efforts.

Have a good day.

}-- End of excerpt from [EMAIL PROTECTED]

As always,
Dr. G.W. Wettstein, Ph.D.   Enjellic Systems Development, LLC.
4206 N. 19th Ave.           Specializing in information infra-structure
Fargo, ND  58102            development.
PH: 701-281-1686
FAX: 701-281-3949           EMAIL: [EMAIL PROTECTED]
------------------------------------------------------------------------------
"So you force loaded a 1.2.13 module into 2.1.21 and it broke.  Gee what
a surprise.  I bet loading DOS .COM files as modules doesn't work either."
                                -- Alan Cox
________________________________________________
Kerberos mailing list           [email protected]
https://mailman.mit.edu/mailman/listinfo/kerberos

Reply via email to