[cifs-protocol] How does constrained delegation work?

[Dominic Salemno]

Greetings Andrew,

We have received your questions, and one of our engineers will be following up with you shortly.

dominic salemno . senior support escalation engineer . protocols team
w: (980) 776-9082

-----Original Message-----
From: Andrew Bartlett [mailto:abartlet at samba.org] 
Sent: Thursday, July 16, 2009 11:19 PM
To: Interoperability Documentation Help
Cc: cifs-protocol at samba.org; pfif at tridgell.net
Subject: How does constrained delegation work?

I've seen the documentation in MS-SFU and MS-PAC 2.9 (Constrained Delegation Information), but I'm rather unclear:

How does this get filled out?  What attribute in the backend data store is used, and how does it get from there to the user's PAC?

Andrew Bartlett
--
Andrew Bartlett
http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Cisco Inc.