Heimdal and NAT

[Erland Lewin <erl@voxi.com>]

I am trying to use heimdal to authenticate me through masquerading (NAT) and a
VPN tunnel and other crap which mangles my IP-address.
  I read somewhere that this might be solved by requesting tickets with no
address (seems reasonable to me). However, connecting to heimdals telnetd fails
regardless of whether my ticket has an address or not with the following
messages:

> /usr/heimdal/bin/telnet -F <host>
Trying <ipaddr>...
Connected to <ipaddr>.
Escape character is '^]'.
[ Trying mutual KERBEROS5 ... ]
Kerberos V5: mk_req failed (Server not found in Kerberos database)
[ Trying KERBEROS5 ... ]
Kerberos V5: mk_req failed (Server not found in Kerberos database)

I have also tried this with forwardable tickets, but with no effect.
  My most important goal is to authenticate to a cvs server compiled with
gssapi.
  Has anything happened in recent heimdal versions which might affect this? I'm
not sure exactly what versions are running on the various machines involved, but
I can check that out if it matters.
  What should I do?

Thanks for your good work,

  Erland