Frank Burkhardt <[EMAIL PROTECTED]> writes:
> Subject: libauthen-krb5-perl: TGTs should be requested 'forwardable'
> Package: libauthen-krb5-perl
> Version: 1.6-2
> Severity: wishlist
> it would be nice having libauthen-krb5-perl fetch 'forwardable' TGTs by
> default or to make TGT flags optional. Otherwise it's impossible to use
> libauthen-krb5-perl-fetched TGTs for e.g. authentication over ssh.
I don't think it's appropriate to make this sort of policy decision in the
module. This is why there's a krb5.conf option to specify whether you
want forwardable tickets by default. Add:
forwardable = true
to the [libdefaults] section of your krb5.conf if you want programs
requesting Kerberos tickets to get forwardable ones.
--
Russ Allbery ([EMAIL PROTECTED]) <http://www.eyrie.org/~eagle/>
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
