> > That's what sshd uses (probably through gethostname()) to determine > what > principal name to search for in the keytab.
My GSSAPI KeyExchange patches (at http://www.sxw.org.uk/computing/patches/openssh.html) add support for a 'GSSAPIStrictAcceptorCheck' option, which can be used to permit the use of any principal within the keytab. Debian, like many other distributors, ship with that patch as standard. Cheers, Simon. ________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos
