Forum Stats

  • 3,770,291 Users
  • 2,253,091 Discussions
  • 7,875,393 Comments

Discussions

ignore_acceptor_hostname

user13481617
user13481617 Member Posts: 6
edited Feb 11, 2015 2:05PM in Kerberos & Java GSS (JGSS)

Hi,

I was going through the docs but could not be sure the use of "ignore_acceptor_hostname = true", if anybody can explain that will be great. Thanks

Answers

  • user13481617
    user13481617 Member Posts: 6
    edited Feb 11, 2015 2:05PM

    from http://web.mit.edu/


    When accepting GSSAPI or krb5 security contexts for host-based service principals, ignore any hostname passed by the calling application and allow any service principal present in the keytab which matches the service name and realm name (if given). This option can improve the administrative flexibility of server applications multi-homed hosts, but can compromise the security of virtual hosting environments. The default value is false.



This discussion has been closed.