Allow user to restrict KDC to specific addresses krb5kdc has always only supported binding to the wildcard addresses. Add two configuration options to allow specifying the address/port that krb5kdc listens on for UDP and TCP connections. [ghudson@mit.edu: edited documentation; preserved kdc_ports = "" behavior; made kdc_ports and kdc_tcp_ports continue to work in kdcdefaults section] https://github.com/krb5/krb5/commit/5f53d6cfb2cdc2e666a3fd2fe4f3ef21aa8258ae Author: Sarah Day Committer: Greg Hudson Commit: 5f53d6cfb2cdc2e666a3fd2fe4f3ef21aa8258ae Branch: master doc/admin/conf_files/kdc_conf.rst | 53 +++++++++--- doc/admin/install_kdc.rst | 3 +- doc/admin/pkinit.rst | 2 +- src/config-files/kdc.conf | 6 +- src/include/k5-int.h | 2 + src/kadmin/testing/proto/kdc.conf.proto | 4 +- src/kdc/main.c | 140 ++++++++++++++++--------------- src/kdc/realm_data.h | 4 +- src/man/kdc.conf.man | 55 +++++++++--- src/tests/dejagnu/config/default.exp | 24 +++--- src/util/k5test.py | 4 +- 11 files changed, 179 insertions(+), 118 deletions(-)