[cifs-protocol] How does constrained delegation work?

Dominic Salemno doms at microsoft.com
Fri Jul 17 09:24:32 MDT 2009

Greetings Andrew,

We have received your questions, and one of our engineers will be following up with you shortly.

dominic salemno . senior support escalation engineer . protocols team
w: (980) 776-9082

-----Original Message-----
From: Andrew Bartlett [mailto:abartlet at samba.org] 
Sent: Thursday, July 16, 2009 11:19 PM
To: Interoperability Documentation Help
Cc: cifs-protocol at samba.org; pfif at tridgell.net
Subject: How does constrained delegation work?

I've seen the documentation in MS-SFU and MS-PAC 2.9 (Constrained Delegation Information), but I'm rather unclear:

How does this get filled out?  What attribute in the backend data store is used, and how does it get from there to the user's PAC?

Andrew Bartlett
Andrew Bartlett
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Cisco Inc.

More information about the cifs-protocol mailing list