Re: Query regarding S4U2Self protocol extension
Isaac Boukris <[email protected]>
| Newsgroups | gmane.comp.encryption.kerberos.general |
|---|---|
| Message-ID | <CAC-fF8QucOWFZG5SM-G7-00LyR5+avNmJc9+4r0fFVsb1ZpRWg@mail.gmail.com> |
Note, for MIT I think we don't need the NonForwardableDelegation flag, just need to behave as enabled and let the plugin's get_principal() add 'TrustedToAuthForDelegation' if the list is empty. This could simplify the KDC code as we don't need to check the PAC's not-delegated flag, although some tests would need updating. ________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos