[cifs-protocol] [EXTERNAL] MS-PAC: Constrained Delegation Information - TrackingID#2111290040007908

[Jeff McCashland (He/him)]

Thanks for letting me know!

Best regards,
Jeff McCashland (He/him) | Senior Escalation Engineer | Microsoft Protocol Open Specifications Team 
Phone: +1 (425) 703-8300 x38300 | Hours: 9am-5pm | Time zone: (UTC-08:00) Pacific Time (US and Canada)
Local country phone number found here: http://support.microsoft.com/globalenglish | Extension 1138300
We value your feedback.  My manager is Natesha Morrison (namorri), +1 (704) 430-4292

-----Original Message-----
From: Andreas Schneider <asn at samba.org> 
Sent: Friday, December 10, 2021 2:26 AM
To: Jeff McCashland (He/him) <jeffm at microsoft.com>
Cc: cifs-protocol at lists.samba.org; Jeff McCashland <jeffm at microsoftsupport.com>
Subject: Re: [EXTERNAL] MS-PAC: Constrained Delegation Information - TrackingID#2111290040007908

On Wednesday, December 8, 2021 5:29:40 PM CET Jeff McCashland (He/him) wrote:
> Hi Andreas,

Hi Jeff,
 
> I have done some digging into this, and also discussed it with our PAC team.
> 
> It does not appear that there are any undocumented constraints on 
> these values. There are no formatting requirements at all for 
> S4UTransitedServices, which are just used for auditing. 
> S4U2proxyTarget can be any valid format for a security principal, but 
> the caller should be consistent in the form used for each step. It 
> doesn't necessarily need to be an SPN.
> 
> Please let me know if this does not fully resolve your issue.

This resolves my issue. Thank you very much!


	Andreas

-- 
Andreas Schneider                      asn at samba.org
Samba Team                             https://nam06.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.samba.org%2F&data=04%7C01%7Cjeffm%40microsoft.com%7C929c865b92d546210e7f08d9bbc77436%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637747287619622646%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=QTtics%2BHMzM4QijqspgW5wJleXxuM0Zn68XNstUaOZw%3D&reserved=0
GPG-ID:     8DFF53E18F2ABC8D8F3C92237EE0FC4DCC014E3D