3 ms·
Kerberos absolutely works through NAT. I used it to connect to campus servers back in college, through my home NAT. There is an optional field in the Kerberos
by tjohns 9y ago
Kerberos absolutely works through NAT.
I used it to connect to campus servers back in college, through my home NAT.
There is an optional field in the Kerberos ticket that can contain your client address, as an additional point of validation to prevent certain classes of replay attack. That particular feature can conflict with NATs. But it's optional.
- youdontknowtho 9y agoTouche. As one other commenter pointed out, it's naming that can be difficult with NAT and that can break Kerberos. Good point.