On Thu, 2018-09-06 at 16:24 -0400, Simo Sorce via FreeIPA-users wrote:
I need to ask, if you really mean "delegation" or if you
mean
"single-
sign-on" here.
I definitely am. I've been using the -K switch for ssh to ensure GSSAPI
credentials are used and forwarded.
Delegation is completely unrelated to whatever server name is used,
so
a short name won't break delegation per se. However SSO will be
broken
if a ticket cannot be found.
I've also been double checking that I have a ticket each time I've
tested.
--
Ranbir