On 12.08.2011 16:43, Richard Silverman wrote:
> The "policy" option delegates if and only if the OK-AS-DELEGATE flag is
> set in the Kerberos service ticket, which is a matter of realm policy.
> The Windows KDCs set this flag for services whose domain account has the
> option:
>
> "Trust this user for delegation to any service (Kerberos only)"
>
> ... set in the MMC AD Users and Computers GUI.
>

Thanks for clarifying Richard.

-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-users
FAQ: http://curl.haxx.se/docs/faq.html
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2011-08-12