Add enforce_ok_as_delegate setting If this flag is set to true, then GSSAPI credential delegation will be disabled when the "ok-as-delegate" flag is not set in the service ticket. Rebuild krb5.conf.man. [ghudson@mit.edu: edited comments and documentation] https://github.com/krb5/krb5/commit/5f497a6bf3131cc616d579803cfc83fc85ea8cf8 Author: Viktor Dukhovni Committer: Greg Hudson Commit: 5f497a6bf3131cc616d579803cfc83fc85ea8cf8 Branch: master doc/admin/conf_files/krb5_conf.rst | 7 ++++ src/include/k5-int.h | 2 + src/lib/gssapi/krb5/init_sec_context.c | 7 ++++ src/lib/krb5/krb/init_ctx.c | 5 +++ src/lib/krb5/krb/t_copy_context.c | 2 + src/man/krb5.conf.man | 48 ++++++++++--------------------- 6 files changed, 39 insertions(+), 32 deletions(-)