delegation.d 561 B

123456789101112131415161718192021
  1. Long: delegation
  2. Arg: <LEVEL>
  3. Help: GSS-API delegation permission
  4. Protocols: GSS/kerberos
  5. Category: auth
  6. Example: --delegation "none" $URL
  7. Added: 7.22.0
  8. ---
  9. Set LEVEL to tell the server what it is allowed to delegate when it
  10. comes to user credentials.
  11. .RS
  12. .IP "none"
  13. Do not allow any delegation.
  14. .IP "policy"
  15. Delegates if and only if the OK-AS-DELEGATE flag is set in the Kerberos
  16. service ticket, which is a matter of realm policy.
  17. .IP "always"
  18. Unconditionally allow the server to delegate.
  19. .RE
  20. If this option is used several times, the last one will be used.