[krbdev.mit.edu #5596] patch for providing a way to set the ok-as-delegate flag

nalin@redhat.com via RT rt-comment at krbdev.mit.edu
Tue Jul 17 16:27:15 EDT 2007


On Tue, Jul 17, 2007 at 04:11:28PM -0400, Sam Hartman via RT wrote:
> Note that this is related to a similar issue that we've received from
> Sandia.  We should look at both in conjunction and should try to deal
> with both soon.

I have to confess that I'm not really familiar with using RT.  Do you
mean #2940?  I steered clear of touching client libraries because I
didn't think that always delegating credentials when the flag was set
would be a popular idea.

At first glance, though, it looks pretty easy to hack in.  If it's
useful, I can try to put something together, possibly with a
configuration setting to allow disabling the new behavior.

Thanks,

Nalin




More information about the krb5-bugs mailing list