title: Kerberos Credential Delegation
body: <p>I am trying a sample credential delegation program using GSS API on Active Directory Client and Service. On using <code>context.requestCredDeleg(true)</code>, when i check <code>context.getCredDelegState()</code>, it returns true on client side before context establishment. But after context establishment, when i check the credential delegation state on the intermediate server side, it returns false.</p>
  
  <p>I have set the "Trust this user for delegation to any service( Kerberos Only )" for the user.
  Also, "Account is sensitive and cannot be delegated" field is unchecked in Active Directory Administrative Center User Properties. Same has been applied to the service user properties as well. I am running both client and server on same Computer which is part of kerberos domain, for that computer properties also, delegation is allowed in Active Directory Administrative Center.</p>
  
  <p>I used the following as reference :
  Client-Server program source : <a href="http://docs.oracle.com/javase/1.4.2/docs/guide/security/jgss/tutorials/BasicClientServer.html" rel="nofollow">http://docs.oracle.com/javase/1.4.2/docs/guide/security/jgss/tutorials/BasicClientServer.html</a></p>
  
  <p>Credential Delegation doc : <a href="http://docs.oracle.com/javase/1.4.2/docs/guide/security/jgss/tutorials/MoreToDo.html#DelCr" rel="nofollow">http://docs.oracle.com/javase/1.4.2/docs/guide/security/jgss/tutorials/MoreToDo.html#DelCr</a></p>
  
  <p>Sample client-server is working fine, only i am not able to do credential delegation.</p>