From: Petr Stodulka <pstodulk@redhat.com>
Date: Wed, 28 Sep 2016 17:03:23 GMT
Subject: Re: [PATCH] http: Control GSSAPI credential delegation.
Message-ID: <a4d9efd9-8cce-dafe-f2f7-0cdbc5d7ddae@redhat.com>
In-Reply-To: <1475078752-31195-1-git-send-email-pstodulk@redhat.com>



On 28.9.2016 18:05, Petr Stodulka wrote:
> Delegation of credentials is disabled by default in libcurl since
> version 7.21.7 due to security vulnerability CVE-2011-2192. Which
> makes troubles with GSS/kerberos authentication where delegation
> of credentials is required. This can be changed with option
> CURLOPT_GSSAPI_DELEGATION in libcurl with set expected parameter
> since libcurl version 7.22.0.

Correction:
  Which makes troubles with GSS/kerberos authentication when delegation
  of credentials is required.