[cifs-protocol] [EXTERNAL] MS-PAC: Constrained Delegation Information - TrackingID#2111290040007908
Jeff McCashland (He/him)
jeffm at microsoft.com
Fri Dec 10 17:58:52 UTC 2021
Thanks for letting me know!
Jeff McCashland (He/him) | Senior Escalation Engineer | Microsoft Protocol Open Specifications Team
Phone: +1 (425) 703-8300 x38300 | Hours: 9am-5pm | Time zone: (UTC-08:00) Pacific Time (US and Canada)
Local country phone number found here: http://support.microsoft.com/globalenglish | Extension 1138300
We value your feedback. My manager is Natesha Morrison (namorri), +1 (704) 430-4292
From: Andreas Schneider <asn at samba.org>
Sent: Friday, December 10, 2021 2:26 AM
To: Jeff McCashland (He/him) <jeffm at microsoft.com>
Cc: cifs-protocol at lists.samba.org; Jeff McCashland <jeffm at microsoftsupport.com>
Subject: Re: [EXTERNAL] MS-PAC: Constrained Delegation Information - TrackingID#2111290040007908
On Wednesday, December 8, 2021 5:29:40 PM CET Jeff McCashland (He/him) wrote:
> Hi Andreas,
> I have done some digging into this, and also discussed it with our PAC team.
> It does not appear that there are any undocumented constraints on
> these values. There are no formatting requirements at all for
> S4UTransitedServices, which are just used for auditing.
> S4U2proxyTarget can be any valid format for a security principal, but
> the caller should be consistent in the form used for each step. It
> doesn't necessarily need to be an SPN.
> Please let me know if this does not fully resolve your issue.
This resolves my issue. Thank you very much!
Andreas Schneider asn at samba.org
Samba Team https://nam06.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.samba.org%2F&data=04%7C01%7Cjeffm%40microsoft.com%7C929c865b92d546210e7f08d9bbc77436%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637747287619622646%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=QTtics%2BHMzM4QijqspgW5wJleXxuM0Zn68XNstUaOZw%3D&reserved=0
More information about the cifs-protocol