Hi All, I was trying to add a host principal in KDC (below is the SAS link I am following) and the command doesn't seem to recognize "ok_to_delegate". I have less knowledge in kerberos mechanism. Could you advise if ok_as_delegate can be used instead? https://documentation.sas.com/?docsetId=hpaicg&docsetTarget=n02024sashpanalytics0install.htm&docsetVersion=3.9&locale=en#n02029sashpanalytics0install [root@xxxxx~]# kadmin -q "addprinc –randkey +ok_to_delegate host/xxxxx.ic.xxxx.net" Authenticating as principal root/admin@karthikhdp.IC.xxxx.NET with password. Password for root/admin@karthikhdp.IC.xxxx.NET: usage: add_principal [options] principal options are: [-randkey|-nokey] [-x db_princ_args]* [-expire expdate] [-pwexpire pwexpdate] [-maxlife maxtixlife] [-kvno kvno] [-policy policy] [-clearpolicy] [-pw password] [-maxrenewlife maxrenewlife] [-e keysaltlist] [{+|-}attribute] attributes are: allow_postdated allow_forwardable allow_tgs_req allow_renewable allow_proxiable allow_dup_skey allow_tix requires_preauth requires_hwauth needchange allow_svr password_changing_service ok_as_delegate ok_to_auth_as_delegate no_auth_data_required lockdown_keys where, [-x db_princ_args]* - any number of database specific arguments. Look at each database documentation for supported arguments
... View more