MS - Extensions kdc cores while making S4U2self request

[Nikhil Mishra]

I am not able to locate any documentation for defining policies on MIT kdc
for constraine delegation .

Are there any guidelines/documentation on how to define policies related to
constrained delegation ?

Thanks

--Nikhil--

On Tue, Jan 27, 2009 at 4:43 AM, Nikhil Mishra <ls.niks at gmail.com> wrote:

> Thanks Luke it helped .
>
> Being a newbie , it took a lot of time though for me to figure this out on
> my own .
> Anyways , Now my S4U2self requests return me following error :
>
> KDC policy rejects request while getting credentials
>
>
> I guess I need to define some policy on kdc to be able to get S4U2self
> tickets .
>
> Thanks anyways .
>
> --Nikhil--
>
>
> On Tue, Jan 27, 2009 at 4:18 AM, Luke Howard <lukeh at padl.com> wrote:
>
>> My bad, does this help:
>> Index: asn1_k_decode.c
>> ===================================================================
>> --- asn1_k_decode.c (revision 21793)
>> +++ asn1_k_decode.c (working copy)
>> @@ -1208,6 +1208,7 @@
>>  {
>>      setup();
>>      { begin_structure();
>> + alloc_field(val->user, krb5_principal_data);
>>          get_field(val->user,0,asn1_decode_principal_name);
>>          get_field(val->user,1,asn1_decode_realm);
>>          get_field(val->cksum,2,asn1_decode_checksum);
>>
>>
>> --luke
>>
>
>