[Freeipa-devel] [Fwd: Re: [modauthkerb] Negotiate on Windows with cross-realm trust AD and MIT Kereros.]
Andrew Bartlett
abartlet at samba.org
Thu Jul 19 02:00:23 UTC 2007
On Wed, 2007-07-18 at 09:18 -0400, Rob Crittenden wrote:
> Does this mean that our forwarding scheme is doomed? Is ok-as-delegate
> required for us to do what we want?
Either that, or have firefox and the client configuration pre-configured
to get and pass on forwardable tickets by default. I think...
The problem that ok-as-delegate was designed to solve is that the client
app is entirely the wrong place to have to configure this.
Andrew Bartlett
--
Andrew Bartlett http://samba.org/~abartlet/
Authentication Developer, Samba Team http://samba.org
Samba Developer, Red Hat Inc. http://redhat.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20070719/db4bed77/attachment.sig>
More information about the Freeipa-devel
mailing list