freeipa

#5357 [RFE] Make S4U2Self work across forest boundaries
Opened by sbose. Modified

Open
Close Issue

MIT Kerberos 1.14 can now properly handle S4U2Self across domain and forest boundaries (I tested this in a setup with 2 AD forests with request going from a child domain to a child domain in the other forest). Unfortunately it is currently not working with IPA in neither direction.

Metadata Update from @sbose:
- Issue assigned to someone
- Issue set to the milestone: FreeIPA 4.5 backlog

Related: https://pagure.io/freeipa/issue/8310

Metadata Update from @abbra:
- Issue close_status updated to: None
- Issue set to the milestone: None (was: FreeIPA 4.5 backlog)
Metadata
None
None
None
Normal
enhancement
KDC LDAP driver
0
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.