doesn't this require the NAT to use the same inside<->outside
address binding for the connection between the client and the KDC as
for the connection between the client and the application server?
e.g. it seems like the NAT could easily change address bindings
during the lifetime of a ticket.
True. However, the same problem applies without NAT if the client
changes address bindings, so I wouldn't say this is really a
NAT-related problem.
Under what conditions transparent to the user does a client change
address bindings?
Jeffrey Altman * Sr.Software Designer * Kermit-95 for Win32 and OS/2
The Kermit Project * Columbia University
612 West 115th St #716 * New York, NY * 10025
http://www.kermit-project.org/k95.html *
kermit-support(_at_)kermit-project(_dot_)org