[cifs-protocol] [EXTERNAL] MS-PAC: Constrained Delegation Information - TrackingID#2111290040007908

Andreas Schneider asn at samba.org
Fri Dec 10 10:25:54 UTC 2021


On Wednesday, December 8, 2021 5:29:40 PM CET Jeff McCashland (He/him) wrote:
> Hi Andreas,

Hi Jeff,
 
> I have done some digging into this, and also discussed it with our PAC team.
> 
> It does not appear that there are any undocumented constraints on these
> values. There are no formatting requirements at all for
> S4UTransitedServices, which are just used for auditing. S4U2proxyTarget can
> be any valid format for a security principal, but the caller should be
> consistent in the form used for each step. It doesn't necessarily need to
> be an SPN.
> 
> Please let me know if this does not fully resolve your issue.

This resolves my issue. Thank you very much!


	Andreas

-- 
Andreas Schneider                      asn at samba.org
Samba Team                             www.samba.org
GPG-ID:     8DFF53E18F2ABC8D8F3C92237EE0FC4DCC014E3D





More information about the cifs-protocol mailing list