Nico, thank you for your help! We are not using NAT, so I am not concerned about possible trouble caused by using IP addresses to control where a ticket can be used from. I tried playing with the noaddresses option in krb5.conf: if I request a ticket with address I get one, if I request one without I also get one. I would like to restrict this at kdc level so only tickets with address are issued. Any idea if it can be done and how?
Emil ________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos
