ConstrainedDelegation and MSLSA
ghudson at mit.edu
Wed Jun 8 00:31:35 EDT 2022
On 6/6/22 14:28, Scot McKinley wrote:
> Hi all, we are experiencing a problem in using MIT KerberosForWindow's
> (KfW) MSLSA in conjunction with ConstrainedDelegation. We are receiving
> the generic error:
> krb5_cc_get_principal(clt) failure (-1765328243)
This is KRB5_CC_NOTFOUND, "Matching credential not found".
You can set the environment variable KRB5_TRACE to a filename to
hopefully find out what principal the library is looking for in the cache.
More information about the krbdev