S2 <some.r at ndom.mail.invalid.net> writes: > is there an implementation of a kdc that has support for something like > ad does with constrined delegation? MIT krb5-1.7 will contain S4U support, for installations where the KDB backend supports it.