Return-Path: X-Original-To: rt@krbdev.mit.edu Received: from mx1.redhat.com (mx1.redhat.com [66.187.233.31]) by krbdev.mit.edu (Postfix) with ESMTP id 7240ECCF13 for ; Wed, 22 Apr 2009 18:39:14 +0000 (UTC) Received: from int-mx1.corp.redhat.com (int-mx1.corp.redhat.com [172.16.52.254]) by mx1.redhat.com (8.13.8/8.13.8) with ESMTP id n3MIdDaf004241 for ; Wed, 22 Apr 2009 14:39:13 -0400 Received: from blade.bos.redhat.com (blade.bos.redhat.com [10.16.0.23]) by int-mx1.corp.redhat.com (8.13.1/8.13.1) with ESMTP id n3MIdDpW000557 for ; Wed, 22 Apr 2009 14:39:13 -0400 Received: from blade.bos.redhat.com (localhost.localdomain [127.0.0.1]) by blade.bos.redhat.com (8.14.3/8.14.2) with ESMTP id n3MIdDfT025063 for ; Wed, 22 Apr 2009 14:39:13 -0400 Received: (from nalin@localhost) by blade.bos.redhat.com (8.14.3/8.14.3/Submit) id n3MIdDtS025062 for rt@krbdev.mit.edu; Wed, 22 Apr 2009 14:39:13 -0400 Date: Wed, 22 Apr 2009 14:39:13 -0400 From: Nalin Dahyabhai To: rt@krbdev.mit.edu Subject: Re: [krbdev.mit.edu #5596] patch for providing a way to set the ok-as-delegate flag Message-ID: <20090422183913.GB1516@redhat.com> References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: Organization: Red Hat, Inc. X-Disclaimer: I am not a spokesmodel. Views expressed are my own. X-Key-ID: 78688BF5 X-Key-Fingerprint: 60BC AD87 AF51 3A00 8C99 0388 379B CE57 7868 8BF5 User-Agent: Mutt/1.5.19 (2009-01-05) X-Scanned-BY: MIMEDefang 2.58 on 172.16.52.254 RT-Send-Cc: X-RT-Original-Encoding: us-ascii Content-Length: 632 On Wed, Apr 22, 2009 at 06:12:00PM +0000, Greg Hudson via RT wrote: > During the time this patch has waited, Luke's work added KDC support for > OK_AS_DELEGATE (but no kadmin support for setting the flag). > Unfortunately, he used a value of 0x00100000 (five zeros after the 1) > while both Red Hat's and Sandia's patch used 0x00010000 (four zeros > after the 1). I am guessing Luke's chosen value came from Novell. This > presents a big transition issue for anyone using Red Hat's or Sandia's > code in production. We haven't shipped anything with this patch applied, so there shouldn't be an issue on our end. Cheers, Nalin