does mit or heimdal have something like constrained delegation?

Peter Djalaliev peter.djalaliev at gmail.com
Wed Apr 29 08:35:15 EDT 2009


Heimdal supports S4U and constrained delegation, but I haven't tested
this feature, so I don't know if it is fully supported.
I believe the goal was to make Heimdal compatible with the AD Kerberos
implementation.

Regards,
Peter Djalaliev


On Apr 28, 4:40 pm, S2 <som... at ndom.mail.invalid.net> wrote:
> On Tue, 28 Apr 2009 16:15:12 -0400, Tom Yu wrote:
> > MIT krb5-1.7 will contain S4U support, for installations where the KDB
> > backend supports it.
>
> thanks. do you know if s4u will be integrated in gss-api as well?




More information about the Kerberos mailing list