Move KRB5_KDB_OK_AS_DELEGATE from kdb_ext.h to kdb.h.  Add kadmin
support for the flag.  In the KDC, remove the restriction on returning
the flag on cross-realm TGTs since there is now a defined meaning for
that (it allows ok-as-delegate to be honored on the foreign realm's
service tickets).


https://github.com/krb5/krb5/commit/55d0fcac60b575123e997abf583bc8cd501e8fae
Commit By: ghudson
Revision: 22281
Changed Files:
U   trunk/src/include/kdb.h
U   trunk/src/include/kdb_ext.h
U   trunk/src/kadmin/cli/kadmin.M
U   trunk/src/kadmin/cli/kadmin.c
U   trunk/src/kdc/do_tgs_req.c
U   trunk/src/lib/kadm5/str_conv.c