[cifs-protocol] [EXTERNAL] MS-PAC: Constrained Delegation Information - TrackingID#2111290040007908
Andreas Schneider
asn at samba.org
Fri Dec 10 10:25:54 UTC 2021
On Wednesday, December 8, 2021 5:29:40 PM CET Jeff McCashland (He/him) wrote:
> Hi Andreas,
Hi Jeff,
> I have done some digging into this, and also discussed it with our PAC team.
>
> It does not appear that there are any undocumented constraints on these
> values. There are no formatting requirements at all for
> S4UTransitedServices, which are just used for auditing. S4U2proxyTarget can
> be any valid format for a security principal, but the caller should be
> consistent in the form used for each step. It doesn't necessarily need to
> be an SPN.
>
> Please let me know if this does not fully resolve your issue.
This resolves my issue. Thank you very much!
Andreas
--
Andreas Schneider asn at samba.org
Samba Team www.samba.org
GPG-ID: 8DFF53E18F2ABC8D8F3C92237EE0FC4DCC014E3D
More information about the cifs-protocol
mailing list