Bug#390696: (no subject)

[Russ Allbery]

Frank Burkhardt <fbo3 at gmx.net> writes:

> Subject: libauthen-krb5-perl: TGTs should be requested 'forwardable'
> Package: libauthen-krb5-perl
> Version: 1.6-2
> Severity: wishlist

> it would be nice having libauthen-krb5-perl fetch 'forwardable' TGTs by
> default or to make TGT flags optional. Otherwise it's impossible to use
> libauthen-krb5-perl-fetched TGTs for e.g. authentication over ssh.

I don't think it's appropriate to make this sort of policy decision in the
module.  This is why there's a krb5.conf option to specify whether you
want forwardable tickets by default.  Add:

    forwardable = true

to the [libdefaults] section of your krb5.conf if you want programs
requesting Kerberos tickets to get forwardable ones.

-- 
Russ Allbery (rra at debian.org)               <http://www.eyrie.org/~eagle/>