[cifs-protocol] How does constrained delegation work?

[Andrew Bartlett]

I've seen the documentation in MS-SFU and MS-PAC 2.9 (Constrained
Delegation Information), but I'm rather unclear:

How does this get filled out?  What attribute in the backend data store
is used, and how does it get from there to the user's PAC?

Andrew Bartlett
-- 
Andrew Bartlett
http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Cisco Inc.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <http://lists.samba.org/pipermail/cifs-protocol/attachments/20090717/be928f5f/attachment.pgp>