Michael Graff <explorer@flame.org> writes:
> What is really needed is an addition to the krb5.conf file.  Someone
> should code this.  :)
> 
> [libdefaults]
> 	scan_interfaces = no
> 	add_ipaddresses = 1.2.3.4, 2.3.4.5

Been there, done that.  But it's

[libdefaults]
        extra_addresses = 1.2.3.4 2.3.4.5

Why don't you want to add the actual addresses to the ticket as well?
You might end up taking to some host on this side of the NAT-curtain?

(This is in Heimdal BTW -- coming soon to a cryptosrc-intl near you, I
believe.)

/assar