[External] : Re: S4U2Proxy

[Rajbir Chahal]

Hi Ken,

Thank you for the response.

Is S4U2Proxy unsupported by other Kerberos database modules (klmdb, kldap) too?

thanks,
Rajbir
________________________________
From: Ken Hornstein <kenh at cmf.nrl.navy.mil>
Sent: Monday, August 12, 2024 5:57 PM
To: Rajbir Chahal <rajbir.chahal at oracle.com>
Cc: krbdev at mit.edu <krbdev at mit.edu>
Subject: [External] : Re: S4U2Proxy

>In KDC, krb5_db_allowed_to_delegate_from() returns KRB5_PLUGIN_OP_NOTSUPP because 'v->allowed_to_delegate_from == NULL'.
>
>Is S4U2Proxy not supported by default KDB module (db2)?

Sadly, no.

It's on my list to submit a patch for that, but it's low priority for
me as we have no direct need for S4U2Proxy at this time but I could see
a future use for it.

--Ken