[krbdev.mit.edu #5596] patch for providing a way to set the ok-as-delegate flag

nalin@redhat.com via RT rt-comment at krbdev.mit.edu
Wed Apr 22 14:39:14 EDT 2009


On Wed, Apr 22, 2009 at 06:12:00PM +0000, Greg Hudson via RT wrote:
> During the time this patch has waited, Luke's work added KDC support for
> OK_AS_DELEGATE (but no kadmin support for setting the flag). 
> Unfortunately, he used a value of 0x00100000 (five zeros after the 1)
> while both Red Hat's and Sandia's patch used 0x00010000 (four zeros
> after the 1).  I am guessing Luke's chosen value came from Novell.  This
> presents a big transition issue for anyone using Red Hat's or Sandia's
> code in production.

We haven't shipped anything with this patch applied, so there shouldn't
be an issue on our end.

Cheers,

Nalin




More information about the krb5-bugs mailing list