advanced 14 commands
Service Delegation
Manage constrained delegation rules for Kerberos services (S4U2Proxy). FreeIPA supports both general constrained delegation (administrator-controlled rules and targets) and resource-based constrained delegation (RBCD, service-controlled access lists). Features include delegation rule creation, membership management for delegating and delegated services, cross-realm delegation support, and support for constrained delegation scenarios enabling secure service-to-service authentication on behalf of end users.