[External] : Re: ConstrainedDelegation and MSLSA

[Scot McKinley]

Thanks Greg. That helps actually, since i thought it was a more generic 
credential acquisition problem.

Thanks, Scot

On 6/7/2022 9:31 PM, Greg Hudson wrote:
> On 6/6/22 14:28, Scot McKinley wrote:
>> Hi all, we are experiencing a problem in using MIT KerberosForWindow's
>> (KfW) MSLSA in conjunction with ConstrainedDelegation.  We are receiving
>> the generic error:
>>
>> krb5_cc_get_principal(clt) failure (-1765328243)
> This is KRB5_CC_NOTFOUND, "Matching credential not found".
>
> You can set the environment variable KRB5_TRACE to a filename to
> hopefully find out what principal the library is looking for in the cache.