lh | 9ed821d | 2023-04-07 01:36:19 -0700 | [diff] [blame] | 1 | Long: delegation |
2 | Arg: <LEVEL> | ||||
3 | Help: GSS-API delegation permission | ||||
4 | Protocols: GSS/kerberos | ||||
5 | --- | ||||
6 | Set LEVEL to tell the server what it is allowed to delegate when it | ||||
7 | comes to user credentials. | ||||
8 | .RS | ||||
9 | .IP "none" | ||||
10 | Don't allow any delegation. | ||||
11 | .IP "policy" | ||||
12 | Delegates if and only if the OK-AS-DELEGATE flag is set in the Kerberos | ||||
13 | service ticket, which is a matter of realm policy. | ||||
14 | .IP "always" | ||||
15 | Unconditionally allow the server to delegate. | ||||
16 | .RE |