[20499] in Kerberos_V5_Development

home help back first fref pref prev next nref lref last post

Re: S4U2Proxy

daemon@ATHENA.MIT.EDU (Ken Hornstein via krbdev)
Mon Aug 12 17:58:20 2024

Message-Id: <202408122157.47CLvxpH009406@hedwig.cmf.nrl.navy.mil>
To: Rajbir Chahal <rajbir.chahal@oracle.com>
cc: "krbdev@mit.edu" <krbdev@mit.edu>
In-Reply-To: <SJ0PR10MB5744049246FB3224D9FD94DE82852@SJ0PR10MB5744.namprd10.prod.outlook.com>
MIME-Version: 1.0
Date: Mon, 12 Aug 2024 17:57:58 -0400
From: Ken Hornstein via krbdev <krbdev@mit.edu>
Reply-To: Ken Hornstein <kenh@cmf.nrl.navy.mil>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu

>In KDC, krb5_db_allowed_to_delegate_from() returns KRB5_PLUGIN_OP_NOTSUPP because 'v->allowed_to_delegate_from == NULL'.
>
>Is S4U2Proxy not supported by default KDB module (db2)?

Sadly, no.

It's on my list to submit a patch for that, but it's low priority for
me as we have no direct need for S4U2Proxy at this time but I could see
a future use for it.

--Ken

_______________________________________________
krbdev mailing list             krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev

home help back first fref pref prev next nref lref last post