[38524] in Kerberos
RE: Constrained Delegation with MIT Kerberos
daemon@ATHENA.MIT.EDU (Jeffries, Joseph L)
Mon Apr 8 16:26:40 2019
From: "Jeffries, Joseph L" <Joseph.Jeffries@minnstate.edu>
To: Simo Sorce <simo@redhat.com>, "Christopher D. Clausen" <cclausen@acm.org>,
"kerberos@mit.edu" <kerberos@mit.edu>
Date: Mon, 8 Apr 2019 16:40:31 +0000
Message-ID: <BL0PR10MB2868B58C54474A472529E85AF42C0@BL0PR10MB2868.namprd10.prod.outlook.com>
Content-Language: en-US
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============5132948247111007806=="
Errors-To: kerberos-bounces@mit.edu
--===============5132948247111007806==
Content-Language: en-US
Content-Type: multipart/related;
boundary="_004_BL0PR10MB2868B58C54474A472529E85AF42C0BL0PR10MB2868namp_";
type="multipart/alternative"
--_004_BL0PR10MB2868B58C54474A472529E85AF42C0BL0PR10MB2868namp_
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64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--_004_BL0PR10MB2868B58C54474A472529E85AF42C0BL0PR10MB2868namp_--
--===============5132948247111007806==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
--===============5132948247111007806==--
