Simon Wilkinson wrote: >> If so, why does the available name depend on the `hostname` setting without >> any change in the DNS? >> > > Because the server picks the acceptor principal to use for incoming > connections by resolving the machine's hostname. You can disable this > behaviour, and permit any principal[1] whose key is in the default keytab by > using a recent version, and setting GSSAPIStrictAcceptorCheck to 'no' > This appears to be only supported through your patch (http://www.sxw.org.uk/computing/patches/openssh.html). Are there plans for including this option in mainline openssh soon?
-Jacob ________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos
