Alternative proxy-creds API for constrained-delegation
iboukris at gmail.com
Fri Jun 5 11:11:04 EDT 2020
On Fri, Jun 5, 2020 at 4:47 PM Nico Williams <nico at cryptonector.com> wrote:
> On Fri, Jun 05, 2020 at 12:11:44PM +0200, Isaac Boukris wrote:
> > Actually, even with the cred_store option for delegation_policy, when
> > using more than one type, one can't really tell what creds he got at
> > the end.
> You need to know? Why?
To know what I hold and what I can do with it.
> Anyways, gss_store_cred_into2() gives us a way to get that.
I'm not interested in what the delegation_policy was, but what the end
More information about the krbdev