
<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div>Hello tridge,</div><br><div><blockquote type="cite"><div><blockquote type="cite">An alternative is to use the GSS_C_DELEG_POLICY_FLAG which only<br></blockquote><blockquote type="cite">delegates if the admin of the domain have said its ok to delegate<br></blockquote><blockquote type="cite">to that host.<br></blockquote><br>Would you recommend that we add it?<br><br>With my current patches the flags we're passing are:<br><br> GSS_C_REPLAY_FLAG | GSS_C_MUTUAL_FLAG | GSS_C_INTEG_FLAG<br></div></blockquote><div><br></div><div>I would recommend what Microsoft sends + GSS_S_DELEG_POLICY_FLAG.</div><div><br></div><div>Love</div><div><br></div></div></body></html>