On 2017-05-26 18:51, Sumit Bose via FreeIPA-users wrote:
[...]
Did you ‘Allow GSSAPI credential delegation’ in the putty configuration?
Additionally the internal Windows Kerberos handling only allows
delegation to host which have the ok-to-delegate flag set in the
Kerberos service ticket.
Please check with 'ipa host-show hostname' if 'Trusted for delegation:
True', if not please try 'ipa host-mod hostname --ok-as-delegate=True'.
Setting the flag solved the problem. Thanks a lot.
Can this flag be set by default for new hosts?
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
