[31034] in Kerberos
Re: does mit or heimdal have something like constrained delegation?
daemon@ATHENA.MIT.EDU (Peter Djalaliev)
Wed Apr 29 23:29:58 2009
From: Peter Djalaliev <peter.djalaliev@gmail.com>
Date: Wed, 29 Apr 2009 05:35:15 -0700 (PDT)
Message-ID: <9bbeee79-37a2-4c87-9821-75fef528af0b@z8g2000prd.googlegroups.com>
Mime-Version: 1.0
X-Complaints-To: groups-abuse@google.com
Complaints-To: groups-abuse@google.com
To: kerberos@mit.edu
Content-Type: text/plain; charset="iso-8859-1"
Errors-To: kerberos-bounces@mit.edu
Content-Transfer-Encoding: 8bit
Heimdal supports S4U and constrained delegation, but I haven't tested
this feature, so I don't know if it is fully supported.
I believe the goal was to make Heimdal compatible with the AD Kerberos
implementation.
Regards,
Peter Djalaliev
On Apr 28, 4:40 pm, S2 <som...@ndom.mail.invalid.net> wrote:
> On Tue, 28 Apr 2009 16:15:12 -0400, Tom Yu wrote:
> > MIT krb5-1.7 will contain S4U support, for installations where the KDB
> > backend supports it.
>
> thanks. do you know if s4u will be integrated in gss-api as well?
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
