| lh | 9ed821d | 2023-04-07 01:36:19 -0700 | [diff] [blame] | 1 | Long: delegation |
| 2 | Arg: <LEVEL> | ||||
| 3 | Help: GSS-API delegation permission | ||||
| 4 | Protocols: GSS/kerberos | ||||
| 5 | --- | ||||
| 6 | Set LEVEL to tell the server what it is allowed to delegate when it | ||||
| 7 | comes to user credentials. | ||||
| 8 | .RS | ||||
| 9 | .IP "none" | ||||
| 10 | Don't allow any delegation. | ||||
| 11 | .IP "policy" | ||||
| 12 | Delegates if and only if the OK-AS-DELEGATE flag is set in the Kerberos | ||||
| 13 | service ticket, which is a matter of realm policy. | ||||
| 14 | .IP "always" | ||||
| 15 | Unconditionally allow the server to delegate. | ||||
| 16 | .RE | ||||