| From: | ghudson@mit.edu |
| Subject: | git commit |
Omit signedpath if no_auth_data_required is set
The no_auth_data_required bit was introduced to suppress PACs in
service tickets when the back end supports them. Make it also
suppress AD-SIGNEDPATH, so that the ~70-byte expansion of the ticket
can be avoided for services which aren't going to do constrained
delegation.
https://github.com/krb5/krb5/commit/eaaf406f5ab3224fc262da300476efa21b407bed
Author: Greg Hudson <ghudson@mit.edu>
Commit: eaaf406f5ab3224fc262da300476efa21b407bed
Branch: master
doc/admin/admin_commands/kadmin_local.rst | 9 +++++++++
doc/admin/conf_files/kdc_conf.rst | 4 ++--
src/kdc/kdc_authdata.c | 3 ++-
3 files changed, 13 insertions(+), 3 deletions(-)