I have enabled kerberos with enable-passthrough for Authorization header as written here: Kerberos - Auth Methods | Vault | HashiCorp Developer. Below is the command executed and its result below:
PS E:\Vault\vault_2.0.0_windows_amd64> .\vault.exe auth enable -passthrough-request-headers=Authorization -allowed-response-headers=www-authenticate kerberos
Success! Enabled kerberos auth method at: kerberos/
But the auth list detail is showing an empty map[] under the Options header. Am I right to expect something like :
map[allowed_response_headers:[www-authenticate] passthrough_request_headers:[Authorization]]
The vault version is “Vault v2.0.0 (cf1ce4df8af6e323558bd5f8c37e771388cbc951), built 2026-04-13T18:49:01Z” and the kerberos plugin v0.17.1+builtin.
Below is the line against kerberos from the output of “vault auth list -detailed”:
Path Plugin Accessor Default TTL Max TTL Token Type Replication Seal Wrap External Entropy Access Options Description UUID Version Running Version Running SHA256 Deprecation Status
kerberos/ kerberos auth_kerberos_213a2c9e system system default-service replicated false false map n/a 50252b16-ba9b-36be-0921-3d62fad56e46 n/a v0.17.1+builtin n/a supported
