Implement forwarding of leaf TGTs to selected realms.
commit5bbe7c8dc65d42f5efd872a02937f676f3a127d8
authorViktor Dukhovni <viktor@twosigma.com>
Tue, 29 Oct 2019 20:02:14 +0000 (29 20:02 +0000)
committerNico Williams <nico@cryptonector.com>
Wed, 30 Oct 2019 21:20:58 +0000 (30 16:20 -0500)
tree2998950656e657cab70b6e37238425790cce39a6
parentd81118cc1f924df3c68f528d37cff0faa10565c7
Implement forwarding of leaf TGTs to selected realms.

Refactor and enhance TGT forwarding to allow forwarding of leaf
(destination) TGTs for selected destination realms.

Enhance kinit(1) to renew non-origin realm tickets

Document delegate-destination-tgt

Use the newly implemented _krb5_mk_1cred().
kuser/kinit.1
kuser/kinit.c
lib/gssapi/krb5/init_sec_context.c
lib/krb5/addr_families.c
lib/krb5/get_for_creds.c
lib/krb5/krb5.conf.5