[krbdev.mit.edu #7871] KDC should not fail requests due to forwardable/proxiable option

Russ Allbery via RT rt-comment at krbdev.mit.edu
Wed Apr 2 16:36:52 EDT 2014


"Greg Hudson via RT" <rt-comment at krbdev.mit.edu> writes:

> This is not a high-priority issue since DISALLOW_FORWARDABLE is probably
> not often used.

FWIW, we use it heavily for privileged principals, and have struggled with
this for years in various ways.

-- 
Russ Allbery (eagle at eyrie.org)              <http://www.eyrie.org/~eagle/>



More information about the krb5-bugs mailing list