delegation.d 446 B

1234567891011121314151617
  1. Long: delegation
  2. Arg: <LEVEL>
  3. Help: GSS-API delegation permission
  4. Protocols: GSS/kerberos
  5. Category: auth
  6. ---
  7. Set LEVEL to tell the server what it is allowed to delegate when it
  8. comes to user credentials.
  9. .RS
  10. .IP "none"
  11. Don't allow any delegation.
  12. .IP "policy"
  13. Delegates if and only if the OK-AS-DELEGATE flag is set in the Kerberos
  14. service ticket, which is a matter of realm policy.
  15. .IP "always"
  16. Unconditionally allow the server to delegate.
  17. .RE