[Freeipa-devel] [PATCH] s4u2proxy support

Alexander Bokovoy abokovoy at redhat.com
Thu Jan 5 10:21:30 UTC 2012


On Wed, 04 Jan 2012, Rob Crittenden wrote:
> >>+        parser.add_option('--delegate', action='store_true',
> >>+            help='Delegate the TGT to the IPA server',
> >>+        )
> >
> >Otherwise ACK.
> >
> 
> Updated both patches. The first (914) to address Alexander's
> concern. The second to add a new global lock directive. I updated
> the mod_auth_kerb patch based on feedback from the package
> maintainer.
I'm testing both patches. Unfortunately, there is no mod_auth_kerb 
option KrbConstrainedDelegationLock in the mod_auth_kerb 5.4-8 that 
you have provided. SourceForge is broken these days and I can't access 
anything on mod_auth_kerb upstream to verify if their development tree 
contains support for the option.

I have disabled KrbConstrainedDelegationLock for time being.

Other than that all works for me.
-- 
/ Alexander Bokovoy




More information about the Freeipa-devel mailing list