diff options
| author | Luke Howard <lukeh@padl.com> | 2009-09-11 12:45:33 +0000 |
|---|---|---|
| committer | Luke Howard <lukeh@padl.com> | 2009-09-11 12:45:33 +0000 |
| commit | cdaf7e2c778fc57a299ea2500b985a4bfb981b3e (patch) | |
| tree | 8a337c4ea76bc2d5c57be1242cf59651c76a956a | |
| parent | c47e104aa3ba2f0280dbcb9483e3ff956a688d7a (diff) | |
| download | krb5-cdaf7e2c778fc57a299ea2500b985a4bfb981b3e.zip krb5-cdaf7e2c778fc57a299ea2500b985a4bfb981b3e.tar.gz krb5-cdaf7e2c778fc57a299ea2500b985a4bfb981b3e.tar.bz2 | |
update manual page for S4U
git-svn-id: svn://anonsvn.mit.edu/krb5/users/lhoward/s4u@22727 dc483132-0cff-0310-8789-dd5450dbe970
| -rw-r--r-- | src/clients/kvno/kvno.M | 14 |
1 files changed, 14 insertions, 0 deletions
diff --git a/src/clients/kvno/kvno.M b/src/clients/kvno/kvno.M index b7e4d46..37b0bcb 100644 --- a/src/clients/kvno/kvno.M +++ b/src/clients/kvno/kvno.M @@ -51,6 +51,13 @@ suppress printing .B \-h prints a usage statement and exits .TP +.B \-P +specifies that the +.B service1 service2 ... +arguments are to be treated as services for which credentials should +be acquired using constrained delegation. This option is only valid +when used in conjunction with protocol transition. +.TP .B \-S sname specifies that krb5_sname_to_principal() will be used to build principal names. If this flag is specified, the @@ -59,6 +66,13 @@ arguments are interpreted as hostnames (rather than principal names), and .B sname is interpreted as the service name. +.TP +.B \-U for_user +specifies that protocol transition (S4U2Self) is to be used to acquire +a ticket on behalf of +.B for_user. +If constrained delegation is not requested, the service name +must match the credentials cache client principal. .SH ENVIRONMENT .B Kvno uses the following environment variable: |