1 Long: delegation 2 Arg: <LEVEL> 3 Help: GSS-API delegation permission 4 Protocols: GSS/kerberos 5 --- 6 Set LEVEL to tell the server what it is allowed to delegate when it 7 comes to user credentials. 8 .RS 9 .IP "none" 10 Don't allow any delegation. 11 .IP "policy" 12 Delegates if and only if the OK-AS-DELEGATE flag is set in the Kerberos 13 service ticket, which is a matter of realm policy. 14 .IP "always" 15 Unconditionally allow the server to delegate. 16 .RE 17
