blob: c4659d844cbaf75eddcd85e0bb25f98c5e82b4ab [file] [log] [blame]
xf.li6c8fc1e2023-08-12 00:11:09 -07001c: Copyright (C) 1998 - 2022, Daniel Stenberg, <daniel@haxx.se>, et al.
2SPDX-License-Identifier: curl
3Long: delegation
4Arg: <LEVEL>
5Help: GSS-API delegation permission
6Protocols: GSS/kerberos
7Category: auth
8Example: --delegation "none" $URL
9Added: 7.22.0
10See-also: insecure ssl
11Multi: single
12---
13Set LEVEL to tell the server what it is allowed to delegate when it
14comes to user credentials.
15.RS
16.IP "none"
17Do not allow any delegation.
18.IP "policy"
19Delegates if and only if the OK-AS-DELEGATE flag is set in the Kerberos
20service ticket, which is a matter of realm policy.
21.IP "always"
22Unconditionally allow the server to delegate.
23.RE