docs: --delegation

diff --git a/RELEASE-NOTES b/RELEASE-NOTES
index b2900dc32b4a590b50856ba965a7dc49473f7af3..6e5c4e03bd7e50173809360289466843d8027b46 100644 (file)
--- a/RELEASE-NOTES
+++ b/RELEASE-NOTES
@@ -1,7 +1,7 @@
 Curl and libcurl 7.22.0
 
  Public curl releases:         124
- Command line options:         148
+ Command line options:         149
  curl_easy_setopt() options:   192
  Public functions in libcurl:  58
  Known libcurl bindings:       39
@@ -14,7 +14,7 @@ This release includes the following changes:
  o Display notes from setup file in testcurl.pl
  o BSD-style lwIP TCP/IP stack support on Windows
  o OpenSSL: Use SSL_MODE_RELEASE_BUFFERS if available
- o 
+ o --delegation was added to set CURLOPT_GSSAPI_DELEGATION
 
 This release includes the following bugfixes:
 

diff --git a/docs/curl.1 b/docs/curl.1
index 362bea1b619ac78b8dc4f3dc67b6fa424d0160c6..92835c208fe8de6208fc3b3543550544f3f805f5 100644 (file)
--- a/docs/curl.1
+++ b/docs/curl.1
@@ -320,6 +320,18 @@ URL-encode that data and pass it on in the POST. The name part gets an equal
 sign appended, resulting in \fIname=urlencoded-file-content\fP. Note that the
 name is expected to be URL-encoded already.
 .RE
+.IP "--delegation LEVEL"
+Set \fILEVEL\fP to tell the server what it is allowed to delegate when it
+comes to user credentials. Used with GSS/kerberos.
+.RS
+.IP "none"
+Don't allow any delegation.
+.IP "policy"
+Delegates if and only if the OK-AS-DELEGATE flag is set in the Kerberos
+service ticket, which is a matter of realm policy.
+.IP "always"
+Unconditionally allow the server to delegate.
+.RE
 .IP "--digest"
 (HTTP) Enables HTTP Digest authentication. This is a authentication that
 prevents the password from being sent over the wire in clear text. Use this in