[krbdev.mit.edu #8847] git commit

Wed Nov 13 15:25:10 EST 2019

Wed Nov 13 15:25:10 2019: Request 8847 was acted upon.
 Transaction: Ticket created by ghudson at mit.edu
       Queue: krb5
     Subject: git commit
       Owner: ghudson at mit.edu
  Requestors: 
      Status: new
 Ticket <URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=8847 >

Add enforce_ok_as_delegate setting

If this flag is set to true, then GSSAPI credential delegation will be
disabled when the "ok-as-delegate" flag is not set in the service
ticket.

Rebuild krb5.conf.man.

[ghudson at mit.edu: edited comments and documentation]

https://github.com/krb5/krb5/commit/5f497a6bf3131cc616d579803cfc83fc85ea8cf8
Author: Viktor Dukhovni <viktor at twosigma.com>
Committer: Greg Hudson <ghudson at mit.edu>
Commit: 5f497a6bf3131cc616d579803cfc83fc85ea8cf8
Branch: master
 doc/admin/conf_files/krb5_conf.rst     |    7 ++++
 src/include/k5-int.h                   |    2 +
 src/lib/gssapi/krb5/init_sec_context.c |    7 ++++
 src/lib/krb5/krb/init_ctx.c            |    5 +++
 src/lib/krb5/krb/t_copy_context.c      |    2 +
 src/man/krb5.conf.man                  |   48 ++++++++++---------------------
 6 files changed, 39 insertions(+), 32 deletions(-)