Re: Alternative proxy-creds API for constrained-delegation
Isaac Boukris <[email protected]>
| Newsgroups | gmane.comp.encryption.kerberos.devel |
|---|---|
| Message-ID | <CAC-fF8SwWEaYzskaDST0x-DtasOttuNxTygyLnQ9umvJi9wf6g@mail.gmail.com> |
On Wed, Jun 3, 2020 at 12:05 AM Nico Williams <[email protected]> wrote: > > On Tue, Jun 02, 2020 at 08:35:14PM +0200, Isaac Boukris wrote: > > I'd still love to see an application signal for the service ticket > > using a cred option or name attribute, more likely to help in samba. > > What exactly would the option specify? I'm certain we can fit it in one > of three different ways though. It could specify the delegation-policy for this creds/context for example, or we can make the ticket always available via name-attributes like Simo suggested, but that would be somewhat unrelated work. _______________________________________________ krbdev mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/krbdev