[PATCH] winbind interface to extract SIDs from PAC

Matthieu Patou mat at matws.net
Wed Jul 4 00:09:17 MDT 2012

On 07/03/2012 02:22 PM, Christof Schmitt wrote:
> The attached patches implement a new winbind interface function
> wbcPacToSids. External applications that received a kerberos
> ticket from an ADS can use this function to extract the SIDs from
> the PAC in in the kerberos ticket. This allows external
> applications to retrieve the user ids without reimplementing the
> code for decoding the PAC.
Very good, I was thinking of working on this for our needs, having it in 
winbindd is perfect.
It seems that you need to iron out some case if I follow correctly the 
remarks of other but I like the idea very much.


More information about the samba-technical mailing list