diff options
| author | Ken Raeburn <raeburn@mit.edu> | 2002-03-08 23:11:26 +0000 |
|---|---|---|
| committer | Ken Raeburn <raeburn@mit.edu> | 2002-03-08 23:11:26 +0000 |
| commit | 298b7b16036beec83b74e0c4160bc69b67264b35 (patch) | |
| tree | 5a1a781e006e0d87a835757be7592d525766bd5b /src/appl/bsd | |
| parent | b5f97443b59be33a2b3b923f3410eef330959a11 (diff) | |
| download | krb5-298b7b16036beec83b74e0c4160bc69b67264b35.tar.gz krb5-298b7b16036beec83b74e0c4160bc69b67264b35.tar.xz krb5-298b7b16036beec83b74e0c4160bc69b67264b35.zip | |
update comment
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@14258 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src/appl/bsd')
| -rw-r--r-- | src/appl/bsd/login.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/src/appl/bsd/login.c b/src/appl/bsd/login.c index dee36247a5..e2fd62d27f 100644 --- a/src/appl/bsd/login.c +++ b/src/appl/bsd/login.c @@ -818,7 +818,8 @@ static int verify_krb_v4_tgt (realm) memcpy ((char *) &addr, (char *)hp->h_addr, sizeof (addr)); /* Do we have rcmd.<host> keys? */ #if 0 /* Be paranoid. If srvtab exists, assume it must contain the - right key. */ + right key. The more paranoid mode also helps avoid a + possible DNS spoofing issue. */ have_keys = read_service_key (rcmd_str, phost, realm, 0, KEYFILE, key) ? 0 : 1; memset (key, 0, sizeof (key)); |