ConstrainedDelegation and MSLSA

[Greg Hudson]

On 6/6/22 14:28, Scot McKinley wrote:
> Hi all, we are experiencing a problem in using MIT KerberosForWindow's
> (KfW) MSLSA in conjunction with ConstrainedDelegation.  We are receiving
> the generic error:
> 
> krb5_cc_get_principal(clt) failure (-1765328243)

This is KRB5_CC_NOTFOUND, "Matching credential not found".

You can set the environment variable KRB5_TRACE to a filename to
hopefully find out what principal the library is looking for in the cache.