On 27/03/2023 12:53, Pieter Voet wrote:
Hi Sam, > Have you enabled Connection -> SSH -> Auth -> GSSAPI -> Allow GSSAPI credential delegation? yes I did. That did not solve the issue, but since this is on a corporate AD domain, I do not have the permission to check if the Windows laptop has 'Trust this computer for delegation to any service (Kerberos only)' permission...
I don't think that the computer you're SSHing from will affect whether delegation is possible. I think the TGT has to have the 'forwardable' flag on it?
-- Sam Morris <https://robots.org.uk/> PGP: rsa4096/CAAA AA1A CA69 A83A 892B 1855 D20B 4202 5CDA 27B9 _______________________________________________ sssd-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected] Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
