Return-Path: <tlyu@MIT.EDU>
X-Original-To: rt@krbdev.MIT.EDU
Received: from biscayne-one-station.mit.edu (BISCAYNE-ONE-STATION.MIT.EDU [18.7.7.80]) by krbdev.mit.edu (Postfix) with ESMTP id DA3D8CCF13 for <rt@krbdev.MIT.EDU>; Tue, 21 Apr 2009 22:04:01 +0000 (UTC)
Received: from outgoing.mit.edu (OUTGOING-AUTH.MIT.EDU [18.7.22.103]) by biscayne-one-station.mit.edu (8.13.6/8.9.2) with ESMTP id n3LM40Up002280 for <rt@krbdev.MIT.EDU>; Tue, 21 Apr 2009 18:04:00 -0400 (EDT)
Received: from cathode-dark-space.mit.edu (CATHODE-DARK-SPACE.MIT.EDU [18.18.1.96]) (authenticated bits=56) (User authenticated as tlyu@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.6/8.12.4) with ESMTP id n3LM3xNa013974 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT) for <rt@krbdev.MIT.EDU>; Tue, 21 Apr 2009 18:04:00 -0400 (EDT)
Received: (from tlyu@localhost) by cathode-dark-space.mit.edu (8.12.9.20060308) id n3LM3xQ0015761; Tue, 21 Apr 2009 18:03:59 -0400 (EDT)
To: rt@krbdev.MIT.EDU
Subject: Re: [krbdev.mit.edu #6203] DELEG_POLICY_FLAG for GSS
References: <rt-6203-31114.3.04587425225947@krbdev.mit.edu>
From: Tom Yu <tlyu@MIT.EDU>
Date: Tue, 21 Apr 2009 18:03:59 -0400
In-Reply-To: <rt-6203-31114.3.04587425225947@krbdev.mit.edu> (Greg Hudson via's message of "Tue, 21 Apr 2009 21:41:04 +0000 (UTC)")
Message-ID: <ldviqkxeka8.fsf@cathode-dark-space.mit.edu>
Lines: 11
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Scanned-BY: MIMEDefang 2.42
X-Spam-Flag: NO
X-Spam-Score: 0.00
RT-Send-Cc: 
X-RT-Original-Encoding: us-ascii
Content-Length: 448

"Greg Hudson via RT" <rt-comment@krbdev.mit.edu> writes:

> Love, do you have code to implement the cross-realm part of this change
> in MIT krb5?  (Corresponding to r23846 in Heimdal which strips
> ok-as-delegate from cross-realm tickets if the TGT ticket didn't have it.)
>
> If not I will do it myself this week; I just want to make sure I'm not
> duplicating effort.

I opened RT ticket #6473 for tracking the cross-realm ok-as-delegate
issue.