[cifs-protocol] How does constrained delegation work?

[Andrew Bartlett]

On Wed, 2009-07-22 at 21:57 +0000, Hongwei Sun wrote: 
> Andrew,
> 

> I would like to make sure we have a common understanding of what you meant by "user's PAC". Do you mean the PAC in the user's ticket for service 1, originally sent by the user and subsequently forwarded in "additional-tickets field" of TGS request by service 1? Please clarify, in case the information provided above, along with the documentation, does not sufficiently answer your questions.
> 
>   For general information regarding constrained delegation, the following TechNet article is pretty helpful.(http://technet.microsoft.com/en-us/library/cc738207(WS.10).aspx).

Thanks.  Clearly I have a lot of work to do - I'll get back to you once
I've attempted implementation of the above. 


Andrew Bartlett

-- 
Andrew Bartlett
http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Cisco Inc.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <http://lists.samba.org/pipermail/cifs-protocol/attachments/20090723/ffb17342/attachment.pgp>