Hi Marc, Kerby doesn't support the MS extension yet. It's not scheduled due to limited resources. In near term we're focusing on the support of PKINIT and TokenPreauth, which may solve some use cases enabled by s4u flows.
JDK8 had already supported the MS extension, maybe you could try it? A shortcut for Kerby to support it is to leverage the JDK support. Regards, Kai -----Original Message----- From: Marc Boorshtein [mailto:[email protected]] Sent: Tuesday, October 27, 2015 4:56 AM To: [email protected] Subject: S4u2self and s4u2proxy? Does the kerby client support s4u2self and s4u2proxy? Thanks Marc
