IPv6 privacy extensions breaks kerberos

Martin Laabs mailinglists at martinlaabs.de
Sun Sep 22 11:55:33 UTC 2013


Hi,

I noticed that kerberos stops working when enabling the privacy extension.
This is caused by the changing outgoing IP that does not fit to the dns
name anymore (or do not have a dns record at all)
So every host enabling the privacy extension will be unable to use kerberos
and kerberos enabled services like nfs.
This is a very problematic behavior and I would like to know if there is a
way getting around this.

Thank you,
 Martin Laabs



More information about the freebsd-net mailing list