mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2025-02-25 18:55:28 -06:00
Pre 3.0.0 IPA delegated the TGT to enforce access control in 389-ds. At the point that S4U2Proxy support was added there were still IPA 2.0.x servers in use so this delegation was left in place in ipa-join so that enrollment would work. Those days are long gone, remove that support in the XML and JSON RPC requests. https://pagure.io/freeipa/issue/8405 Signed-off-by: Rob Crittenden <rcritten@redhat.com> Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>