[20501] in Kerberos_V5_Development
Re: [External] : Re: S4U2Proxy
daemon@ATHENA.MIT.EDU (Rajbir Chahal via krbdev)
Tue Aug 13 01:51:25 2024
To: Ken Hornstein <kenh@cmf.nrl.navy.mil>
CC: "krbdev@mit.edu" <krbdev@mit.edu>
Date: Tue, 13 Aug 2024 02:18:03 +0000
Message-ID: <SJ0PR10MB5744CCDC927BE95D89C0A6A682852@SJ0PR10MB5744.namprd10.prod.outlook.com>
In-Reply-To: <202408122157.47CLvxpH009406@hedwig.cmf.nrl.navy.mil>
Content-Language: en-US
MIME-Version: 1.0
From: Rajbir Chahal via krbdev <krbdev@mit.edu>
Reply-To: Rajbir Chahal <rajbir.chahal@oracle.com>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
Hi Ken,
Thank you for the response.
Is S4U2Proxy unsupported by other Kerberos database modules (klmdb, kldap) too?
thanks,
Rajbir
________________________________
From: Ken Hornstein <kenh@cmf.nrl.navy.mil>
Sent: Monday, August 12, 2024 5:57 PM
To: Rajbir Chahal <rajbir.chahal@oracle.com>
Cc: krbdev@mit.edu <krbdev@mit.edu>
Subject: [External] : Re: S4U2Proxy
>In KDC, krb5_db_allowed_to_delegate_from() returns KRB5_PLUGIN_OP_NOTSUPP because 'v->allowed_to_delegate_from == NULL'.
>
>Is S4U2Proxy not supported by default KDB module (db2)?
Sadly, no.
It's on my list to submit a patch for that, but it's low priority for
me as we have no direct need for S4U2Proxy at this time but I could see
a future use for it.
--Ken
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
