On Wed, Apr 22, 2009 at 06:12:00PM +0000, Greg Hudson via RT wrote: > During the time this patch has waited, Luke's work added KDC support for > OK_AS_DELEGATE (but no kadmin support for setting the flag). > Unfortunately, he used a value of 0x00100000 (five zeros after the 1) > while both Red Hat's and Sandia's patch used 0x00010000 (four zeros > after the 1). I am guessing Luke's chosen value came from Novell. This > presents a big transition issue for anyone using Red Hat's or Sandia's > code in production. We haven't shipped anything with this patch applied, so there shouldn't be an issue on our end. Cheers, Nalin