next Kerberos ops/admin teleconference October 7th

2014-10-06 Thread Tom Yu
Kerberos operators and administrators are invited to a public monthly operations-focused teleconference. These take place the first Tuesday of each month at 13:00 (1:00pm) US Eastern Time. The next one will be on October 7th. This is an opportunity for operators or administrators of Kerberos

Not getting delegation credential from gss_accept_sec_context()

2014-10-06 Thread Xie, Hugh
Hi, I am having trouble with S4U2Proxy. Looking into *accept_sec_context.c*, it has : * if (delegated_cred_handle != NULL deleg_cred == NULL /* no unconstrained delegation */ cred-usage == GSS_C_BOTH (ticket-enc_part2-flags TKT_FLG_FORWARDABLE)) { /*

Re: Not getting delegation credential from gss_accept_sec_context()

2014-10-06 Thread Greg Hudson
On 10/06/2014 04:49 PM, Xie, Hugh wrote: I created some printf to check verifier_cred_handle I passed into *gss_accept_sec_context()* are set back to GSS_C_NO_CREDENTIAL once it reach kg_accept_krb5(). That in turn cause one of the condition * cred-usage == GSS_C_BOTH * to be false. I