2 new options to control protocol transition (s4u2self) and constrained delegation (s4u2proxy) are added to control "untrusted" clients impersonation capabilities.
rebased
Pushed to master as 23ff75845ad7e4df03bb1bab7becadcaa28860ef (and below)
Pull-Request has been merged by simo
Commit d33daabd fixes this pull-request
Pull-Request has been merged by simo@fedoraproject.org
2 new options to control protocol transition (s4u2self) and constrained delegation (s4u2proxy) are added to control "untrusted" clients impersonation capabilities.