X-RT-Original-Encoding: utf-8
X-Mailer: MIME-tools 5.507 (Entity 5.507)
Content-Disposition: inline
References: <rt-4.4.4-26136-1594326664-257.0-0-0@mit.edu>
 <RT-Ticket-8925@mit.edu> <rt-4.4.4-70189-1594732155-1388.8925-0-0@mit.edu>
 <rt-4.4.4-70196-1594746854-1477.8925-0-0@mit.edu>
 <rt-4.4.4-70196-1594754825-647.8925-0-0@mit.edu>
 <rt-4.4.4-26916-1594842995-441.8925-0-0@mit.edu>
MIME-Version: 1.0
Message-ID: <rt-4.4.4-112989-1595168616-1595.8925-0-0@mit.edu>
Content-Transfer-Encoding: binary
X-RT-Interface: Web
In-Reply-To: <rt-4.4.4-26916-1594842995-441.8925-0-0@mit.edu>
Content-Type: text/html; charset="utf-8"
RT-Send-CC:
Content-Length: 247

In the previous comment, I meant to say S4U2Proxy, not S4U2Self.&nbsp; This wrinkle cannot be ironed out, because krb5_get_credentials() can only see the evidence ticket, not the&nbsp; client name within, so it cannot check the cache.<br />
&nbsp;