ignore_acceptor_hostname

user13481617

Hi,

I was going through the docs but could not be sure the use of "ignore_acceptor_hostname = true", if anybody can explain that will be great. Thanks

user13481617

from http://web.mit.edu/

When accepting GSSAPI or krb5 security contexts for host-based service principals, ignore any hostname passed by the calling application and allow any service principal present in the keytab which matches the service name and realm name (if given). This option can improve the administrative flexibility of server applications multi-homed hosts, but can compromise the security of virtual hosting environments. The default value is false.