cURL / Mailing Lists / curl-users / Single Mail


Re: negotiate authentication and credential delegation

From: y0ghur7 <>
Date: Fri, 12 Aug 2011 17:34:07 +0200

On 12.08.2011 16:43, Richard Silverman wrote:
> The "policy" option delegates if and only if the OK-AS-DELEGATE flag is
> set in the Kerberos service ticket, which is a matter of realm policy.
> The Windows KDCs set this flag for services whose domain account has the
> option:
> "Trust this user for delegation to any service (Kerberos only)"
> ... set in the MMC AD Users and Computers GUI.

Thanks for clarifying Richard.

List admin:
Received on 2011-08-12