<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="color:rgb(0,0,0); font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt">
<span>+Support [cc]</span></div>
<div style="color:rgb(0,0,0); font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt">
<span>-dochelp [bcc]</span></div>
<div style="color:rgb(0,0,0); font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt">
<span><br>
</span></div>
<div style="color:rgb(0,0,0); font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt">
<span>Hi Isaac</span></div>
<div style="color:rgb(0,0,0); font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt">
<span><br>
</span></div>
<div style="color:rgb(0,0,0); font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt">
<span><span style="display: inline !important; background-color: rgb(255, 255, 255); font-size-adjust: none">Thank you for your question. We created SR 120012821001594 and please leave this info in the subject line to track your issue. An engineer will contact
you soon.</span><br style="color: rgb(32, 31, 30); font-family: " font-size: 14.66px">
<span style="display: inline !important; background-color: rgb(255, 255, 255); font-size-adjust: none"></span><br style="color: rgb(32, 31, 30); font-family: " font-size: 14.66px">
<span style="display: inline !important; background-color: rgb(255, 255, 255); font-size-adjust: none">Hung-Chun Yu</span><br style="color: rgb(32, 31, 30); font-family: " font-size: 14.66px">
<span style="display: inline !important; background-color: rgb(255, 255, 255); font-size-adjust: none">Microsoft Protocols Support</span><br>
</span></div>
<div style="color:rgb(0,0,0); font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt">
<span><br>
</span></div>
<div>
<div id="appendonsend"></div>
<div style="color:rgb(0,0,0); font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt">
<br>
</div>
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font color="#000000" face="Calibri, sans-serif" style="font-size:11pt"><b>From:</b> Isaac Boukris <iboukris@gmail.com><br>
<b>Sent:</b> Tuesday, January 28, 2020 9:10 AM<br>
<b>To:</b> Interoperability Documentation Help <dochelp@microsoft.com>; Greg Hudson <ghudson@mit.edu>; cifs-protocol@lists.samba.org <cifs-protocol@lists.samba.org><br>
<b>Subject:</b> [EXTERNAL] Clarification request on recent errata of MS-SFU from 2019/12/09</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt">
<div class="PlainText">Hello dochelp,<br>
<br>
I noticed some changes to MS-SFU with regard to S4U2Proxy.<br>
<a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fopenspecs%2Fwindows_protocols%2Fms-winerrata%2F68c4fd08-207c-4353-b59d-4d281edfb6bf&data=02%7C01%7CHungChun.Yu%40microsoft.com%7Ce12ab5b14189455d889c08d7a41528cd%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637158283089556045&sdata=j%2FAypN1BjcAbfUrMUwbfqMk41QXw4E2m3pUXMBN%2BAEI%3D&reserved=0">https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fopenspecs%2Fwindows_protocols%2Fms-winerrata%2F68c4fd08-207c-4353-b59d-4d281edfb6bf&data=02%7C01%7CHungChun.Yu%40microsoft.com%7Ce12ab5b14189455d889c08d7a41528cd%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637158283089556045&sdata=j%2FAypN1BjcAbfUrMUwbfqMk41QXw4E2m3pUXMBN%2BAEI%3D&reserved=0</a><br>
<br>
The changes mostly makes sense, apart from the following new section<br>
I'm having hard time with, quote:<br>
<br>
If the service ticket in the additional-tickets field is not set to<br>
forwardable<19> and the PA-PAC-OPTIONS [167] ([MS-KILE] section<br>
2.2.10) padata type has the resource-based constrained delegation bit<br>
set, then the KDC MUST return KRB-ERR-BADOPTION with STATUS_NO_MATCH.<br>
<br>
Unquote.<br>
<br>
If the RBCD bit is set, shouldn't the KDC try to match in<br>
ServicesAllowedToReceiveForwardedTicketsFrom, as it follows in the<br>
document ?<br>
<br>
Thank you<br>
</div>
</span></font></div>
</div>
</body>
</html>