From owner-freebsd-audit  Mon Jul 16  2:26:18 2001
Delivered-To: freebsd-audit@freebsd.org
Received: from axl.seasidesoftware.co.za (axl.seasidesoftware.co.za [196.31.7.201])
	by hub.freebsd.org (Postfix) with ESMTP id EF9DD37B407
	for <freebsd-audit@freebsd.org>; Mon, 16 Jul 2001 02:26:15 -0700 (PDT)
	(envelope-from sheldonh@starjuice.net)
Received: from sheldonh (helo=axl.seasidesoftware.co.za)
	by axl.seasidesoftware.co.za with local-esmtp (Exim 3.31 #1)
	id 15M4eW-0001CF-00; Mon, 16 Jul 2001 11:26:56 +0200
From: Sheldon Hearn <sheldonh@starjuice.net>
To: "Jacques A. Vidrine" <n@nectar.com>
Cc: freebsd-audit@freebsd.org
Subject: Re: Add `ServerPrincipalFromSocket' option to sshd 
In-reply-to: Your message of "Fri, 13 Jul 2001 15:39:46 EST."
             <20010713153946.G67153@madman.nectar.com> 
Date: Mon, 16 Jul 2001 11:26:56 +0200
Message-ID: <4602.995275616@axl.seasidesoftware.co.za>
Sender: owner-freebsd-audit@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-audit.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-audit>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-audit>
X-Loop: FreeBSD.ORG



On Fri, 13 Jul 2001 15:39:46 EST, "Jacques A. Vidrine" wrote:

> Our sshd  very annoyingly uses the  hostname to form the  principal it
> uses for  Kerberos authentication.   This is  especially a  problem on
> machines with multiple IP addresses.

Interesting.  You know about k5init --no-address, though, yes?

Ciao,
Sheldon.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-audit" in the body of the message