NAME

shishi_tkt_ok_as_delegate_p - API function

SYNOPSIS

#include <shishi.h>

int shishi_tkt_ok_as_delegate_p(Shishi_tkt * tkt);

ARGUMENTS

Shishi_tkt * tkt: input variable with ticket info.

DESCRIPTION

Determine if ticket is ok as delegated ticket.

The copy of the ticket flags in the encrypted part of the KDC reply may have the OK-AS-DELEGATE flag set to indicates to the client that the server specified in the ticket has been determined by policy of the realm to be a suitable recipient of delegation. A client can use the presence of this flag to help it make a decision whether to delegate credentials (either grant a proxy or a forwarded ticket- granting ticket) to this server. It is acceptable to ignore the value of this flag. When setting this flag, an administrator should consider the security and placement of the server on which the service will run, as well as whether the service requires the use of delegated credentials.

RETURN VALUE

Returns non-0 iff ok-as-delegate flag is set in ticket.

REPORTING BUGS

Report bugs to <bug-shishi@gnu.org>.

COPYRIGHT

Copyright © 2002-2010 Simon Josefsson.
Copying and distribution of this file, with or without modification, are permitted in any medium without royalty provided the copyright notice and this notice are preserved.