]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
Kerberos can now deal with multi-homed clients.
authorgibbs <gibbs@FreeBSD.org>
Thu, 5 Oct 1995 21:30:21 +0000 (21:30 +0000)
committergibbs <gibbs@FreeBSD.org>
Thu, 5 Oct 1995 21:30:21 +0000 (21:30 +0000)
commit2734551417f3e16093c4cc8de51248dd743fa17b
tree9410ca0cafe506eca75c35934448a29ad19a6482
parent73c29c06751229bf5749b8422047cf613fb47bbc
Kerberos can now deal with multi-homed clients.

Kerberos obtains a network address for the local host from the routing
tables and uses it consistently for all Kerberos transactions.  This ensures
that packets only leave the *authenticated* interface.  Clients who open
and use their own sockets for encrypted or authenticated correspondance
to kerberos services should bind their sockets to the same address as that
used by kerberos.  krb_get_local_addr() and krb_bind_local_addr() allow
clients to obtain the local address or bind a socket to the local address
used by Kerberos respectively.

Reviewed by: Mark Murray <markm>, Garrett Wollman <wollman>
Obtained from: concept by Dieter Dworkin Muller <dworkin@village.org>
15 files changed:
eBones/include/krb.h
eBones/lib/libkadm/kadm_cli_wrap.c
eBones/lib/libkrb/Makefile
eBones/lib/libkrb/krb.3
eBones/lib/libkrb/krb_err.et
eBones/lib/libkrb/krb_err_txt.c
eBones/lib/libkrb/krb_sendauth.3
eBones/lib/libkrb/send_to_kdc.c
eBones/lib/librkinit/rk_rpc.c
eBones/usr.sbin/kprop/kprop.c
libexec/rlogind/rlogind.c
usr.bin/rlogin/kcmd.c
usr.bin/rlogin/rlogin.c
usr.bin/rsh/rsh.c
usr.bin/su/su.c