5 ms·
"Kerberos doesn't work through NAT" I can access my email via Evolution EWS through external name -> NAT -> (good TLS) HAProxy (rubbish SSL) -> Exchange 2016 u
by gerdesj 9y ago
"Kerberos doesn't work through NAT"
I can access my email via Evolution EWS through external name -> NAT -> (good TLS) HAProxy (rubbish SSL) -> Exchange 2016 using Kerberos auth.
- sk5t 9y agoYeah, Kerberos can generally work across NAT, but DNS complexity often makes it not worth the trouble.
- youdontknowtho 9y agoGood point. It's naming that often breaks in NAT. And it's naming that is almost always what breaks Kerb. Cheers.