VFS Implementation and user authentication

[Luke Kenneth Casson Leighton]

> > the PAC in the NT5 Krb5 server contains user profile info, which needs to
> > be conceptually separated from the kerberos ticket itself.
> 
> Of course. I used the word profile. In plain Kerberos all there is to
> the profile is the user principal name, but it (and forwarded TGTs) can
> be used to obtain other profile information that is relevant to the
> app.

[ah, terminology, shmology.]

relevant to the app?  where does that come in with respect to User
Credentials?

> > i am not an expert on appropriate terminology, however i know someone who
> > is :)
> 
> :)

i'll ask him if i can forward the exchanges i had on this topic last week
to the list.