Kerberos Ticket Forwarding patch/update

Jeremy Allison jra at
Thu Jul 24 20:48:44 GMT 2008

On Thu, Jul 24, 2008 at 04:28:26PM -0400, Derrick Schommer wrote:

> I'm looking to commit a patch for the 3.0 code base and the 3.2 code
> base to allow samba using Kerberos authentication to work with proxy
> devices which are set to be "trusted for delegation" in a Windows
> domain. The update, in clikrb5.c would add detection for tickets with
> OK_AS_DELEGATE and would then request a forwardable ticket from the KDC
> and send it along with the krb5_mk_req_extended() function call.
> This would allow operating systems with Samba 3.x to interoperate with
> the F5 Acopia ARX product line for storage virtualization along with any
> other future virtualization vendors. I'm not sure if I send patches to
> this mailer or not (as this patch is 260 lines long and I have one for
> 3.0.x and 3.2.x). I'd love for the team to review it and do what would
> be needed to commit it into the projects.

Send the patch *as an attachement* as a diff -u change to
samba-technical at

Label the patches as the 3.0.x version and the 3.2.x version
and send them separately. I'd love to review them, thanks !


More information about the samba-technical mailing list