[cifs-protocol] [EXTERNAL] MS-PAC: Constrained Delegation Information - TrackingID#2111290040007908
asn at samba.org
Fri Dec 10 10:25:54 UTC 2021
On Wednesday, December 8, 2021 5:29:40 PM CET Jeff McCashland (He/him) wrote:
> Hi Andreas,
> I have done some digging into this, and also discussed it with our PAC team.
> It does not appear that there are any undocumented constraints on these
> values. There are no formatting requirements at all for
> S4UTransitedServices, which are just used for auditing. S4U2proxyTarget can
> be any valid format for a security principal, but the caller should be
> consistent in the form used for each step. It doesn't necessarily need to
> be an SPN.
> Please let me know if this does not fully resolve your issue.
This resolves my issue. Thank you very much!
Andreas Schneider asn at samba.org
Samba Team www.samba.org
More information about the cifs-protocol