]> git.ipfire.org Git - thirdparty/krb5.git/commit
Add enforce_ok_as_delegate setting 995/head
authorViktor Dukhovni <viktor@twosigma.com>
Wed, 6 Nov 2019 03:51:53 +0000 (03:51 +0000)
committerGreg Hudson <ghudson@mit.edu>
Wed, 13 Nov 2019 19:42:58 +0000 (14:42 -0500)
commit5f497a6bf3131cc616d579803cfc83fc85ea8cf8
tree84254947cd028742c71c010133c5697a3e9d2a1c
parent24b844714dea3e47b17511746b5df5b6ddf13d43
Add enforce_ok_as_delegate setting

If this flag is set to true, then GSSAPI credential delegation will be
disabled when the "ok-as-delegate" flag is not set in the service
ticket.

Rebuild krb5.conf.man.

[ghudson@mit.edu: edited comments and documentation]

ticket: 8847 (new)
doc/admin/conf_files/krb5_conf.rst
src/include/k5-int.h
src/lib/gssapi/krb5/init_sec_context.c
src/lib/krb5/krb/init_ctx.c
src/lib/krb5/krb/t_copy_context.c
src/man/krb5.conf.man