[krbdev.mit.edu #5596] patch for providing a way to set the ok-as-delegate flag

Greg Hudson via RT rt-comment at krbdev.mit.edu
Wed Apr 22 14:12:01 EDT 2009


During the time this patch has waited, Luke's work added KDC support for
OK_AS_DELEGATE (but no kadmin support for setting the flag). 
Unfortunately, he used a value of 0x00100000 (five zeros after the 1)
while both Red Hat's and Sandia's patch used 0x00010000 (four zeros
after the 1).  I am guessing Luke's chosen value came from Novell.  This
presents a big transition issue for anyone using Red Hat's or Sandia's
code in production.



More information about the krb5-bugs mailing list