Le 28/06/16 à 15:44, Martin Choma a écrit :
> I have created https://issues.apache.org/jira/browse/DIRSERVER-2156 as you
> suggest. There really is address send in TGS-REQ for krbtgt.
Can you send the bytes that are sent to the server ? I'd liek to have
alook at the content of the message. (you
I have created https://issues.apache.org/jira/browse/DIRSERVER-2156 as you
suggest. There really is address send in TGS-REQ for krbtgt. Is there way
we can workaround this behaviour? Is it bug in ibm java ignoring
noaddresses = true flag? Is it possible to configure ApacheDS not to issue
ticket
Le 28/06/16 à 07:45, Martin Choma a écrit :
> Hi,
>
> ApacheDS issues TGT kerberos ticket with address on IBM java , even if
> noaddresses = true is explicitelly set in krb5.conf.
This is not an Kerberos flag, it's an indication for the kerberos client
to not send an address to the server,
Hi,
ApacheDS issues TGT kerberos ticket with address on IBM java , even if
noaddresses = true is explicitelly set in krb5.conf.
Address in ticket causing problem, because ApacheDS check address in ticket
with address of connection. And that leads to error "error 38 Incorrect net
address"
I dont
