Omit signedpath if no_auth_data_required is set The no_auth_data_required bit was introduced to suppress PACs in service tickets when the back end supports them. Make it also suppress AD-SIGNEDPATH, so that the ~70-byte expansion of the ticket can be avoided for services which aren't going to do constrained delegation. https://github.com/krb5/krb5/commit/eaaf406f5ab3224fc262da300476efa21b407bed Author: Greg Hudson Commit: eaaf406f5ab3224fc262da300476efa21b407bed Branch: master doc/admin/admin_commands/kadmin_local.rst | 9 +++++++++ doc/admin/conf_files/kdc_conf.rst | 4 ++-- src/kdc/kdc_authdata.c | 3 ++- 3 files changed, 13 insertions(+), 3 deletions(-)