summaryrefslogtreecommitdiffstats
path: root/ipa.1
diff options
context:
space:
mode:
authorRob Crittenden <rcritten@redhat.com>2012-02-15 17:06:54 +0100
committerMartin Kosek <mkosek@redhat.com>2012-02-15 17:08:33 +0100
commit2da6d6e7460b932f406b7f0632320433f9f98a85 (patch)
treeb48904578e589bfc942bd1f7150a57fd61e718c6 /ipa.1
parent95b1848f199a8f17936faac921d7b9495f90645b (diff)
downloadfreeipa-2da6d6e7460b932f406b7f0632320433f9f98a85.tar.gz
freeipa-2da6d6e7460b932f406b7f0632320433f9f98a85.tar.xz
freeipa-2da6d6e7460b932f406b7f0632320433f9f98a85.zip
Don't set delegation flag in client, we're using S4U2Proxy now
A forwardable ticket is still required but we no longer need to send the TGT to the IPA server. A new flag, --delegate, is available if the old behavior is required. Set the minimum n-v-r for mod_auth_kerb and krb5-server to pick up needed patches for S4U2Proxy to work. https://fedorahosted.org/freeipa/ticket/1098 https://fedorahosted.org/freeipa/ticket/2246
Diffstat (limited to 'ipa.1')
-rw-r--r--ipa.13
1 files changed, 3 insertions, 0 deletions
diff --git a/ipa.1 b/ipa.1
index a5592b9a6..e9946b823 100644
--- a/ipa.1
+++ b/ipa.1
@@ -37,6 +37,9 @@ Load configuration from \fIFILE\fR.
\fB\-d\fR, \fB\-\-debug\fR
Produce full debugging output.
.TP
+\fB\-\-\-delegate\fR
+Delegate the user's TGT to the IPA server
+.TP
\fB\-e\fR \fIKEY=VAL\fR
Set environmental variable \fIKEY\fR to the value \fIVAL\fR. This option overrides configuration files.
.TP