Le 28/06/16 à 07:45, Martin Choma a écrit : > Hi, > > ApacheDS issues TGT kerberos ticket with address on IBM java , even if > noaddresses = true is explicitelly set in krb5.conf.
This is not an Kerberos flag, it's an indication for the kerberos client to not send an address to the server, AFAICT. Now, under such circonstance, we do process the request, and send back teh ticket with no client address. The thing is that we would need to see what's going on on teh server, using the logs, to see why the ticket that is sent back is incorrect. Could you set the server's log to DEBUG, create a JIRA issue, and attach teh logs you get ? Kai, can you check on Kerby if this is something you support correctly ?
