Simo Sorce wrote: > While reviewing > http://www.freeipa.org/page/V4/Service_Constraint_Delegation#Implementation I found out errors and a potential for misunderstanding about some KDC flags we used. > > This fix makes things a lot more clear and hopefully avoid some bad > surprises for admins. > > Simo. > > > ACK