Content-Type: text/plain Content-Disposition: inline Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.427 (Entity 5.427) From: ghudson@mit.edu Subject: git commit RT-Send-CC: X-RT-Original-Encoding: iso-8859-1 Content-Length: 966 Allow user to restrict kadmind bind addresses kadmind has always only supported binding to the wildcard addresses. Add three configuration options to allow specifying the address/port that kadmind listens on for kpasswd, kadmin, and iprop connections. [ghudson@mit.edu: edited documentation; minimized changes to setup_loop(); added iprop_listen] https://github.com/krb5/krb5/commit/aa91cb5dbbd4356c7a9069f4f52a10f70d91bc00 Author: Sarah Day Committer: Greg Hudson Commit: aa91cb5dbbd4356c7a9069f4f52a10f70d91bc00 Branch: master doc/admin/conf_files/kdc_conf.rst | 55 +++++++++++++++++++++++++++-- src/include/k5-int.h | 3 ++ src/kadmin/server/ovsec_kadmd.c | 14 +++++--- src/lib/kadm5/admin.h | 10 +++-- src/lib/kadm5/alt_prof.c | 8 ++++ src/man/kdc.conf.man | 68 +++++++++++++++++++++++++++++++++---- 6 files changed, 138 insertions(+), 20 deletions(-)