delegation.d 546 B

1234567891011121314151617181920
  1. Long: delegation
  2. Arg: <LEVEL>
  3. Help: GSS-API delegation permission
  4. Protocols: GSS/kerberos
  5. Category: auth
  6. Example: --delegation "none" $URL
  7. ---
  8. Set LEVEL to tell the server what it is allowed to delegate when it
  9. comes to user credentials.
  10. .RS
  11. .IP "none"
  12. Don't allow any delegation.
  13. .IP "policy"
  14. Delegates if and only if the OK-AS-DELEGATE flag is set in the Kerberos
  15. service ticket, which is a matter of realm policy.
  16. .IP "always"
  17. Unconditionally allow the server to delegate.
  18. .RE
  19. If this option is used several times, the last one will be used.